Management of Information Security on the rise

23 Mar, 2013

ISO 27001, Information Security, Management standard, ISO 27001 certification

With the recent headlines identifying areas of major security breaches, SME businesses are now turning to the ISO 27001 information security management system to help protect their businesses against cyber threats and ensure there are no vulnerabilities in their existing systems.

More and more companies are now realising that possession of a security policy by itself does not prevent breaches; staff need to understand it and put it into practice. Only 26% of respondents with a security policy believe their staff have a very good understanding of it; 21% think the level of understanding is poor.

The Economist 2002, explained that: “The human side of computer security is easily exploited and constantly overlooked. Companies spend millions of dollars on firewalls, encryption and secure access devices, and it’s money wasted, because none of these measures address the weakest link in the security chain;  the weakest link is people” .

According to one survey conducted by Infosec (2012) 70% of large organisations detected significant attempts to break into their networks in the past year. The average cost of the worst security breach for large organisations was between £110,000 and £250,000 whereas for small business the cost ranged from £15,000 to £30,000. The root cause, the survey report said, was often the failure to invest in educating staff about security risks, with 75% of organisations where the security policy was poorly understood experiencing staff-related breaches.

It’s important to remember that threats to information security do not come through IT alone. Unhappy staff, resentful ex-employees, deceitful managers and competitors can all have access to your confidential information and can use this to the detriment of the business and its reputation. This can be purposeful or accidental. Information is not confined to electronic format but encompasses all forms of communication including verbal and hard copy.ISO 27001 Certification
By implementing a robust information security system like the ISO 27001, ensures that adequate training and records are in place for all staff so that they know what is expected of them. This can prevent most accidental breaches of security and ensure that the company is reviewing their policies on a regular basis to keep up to date with the advancements in technology.


ISO Quality Services Ltd are proud to specialise in the implementation and certification of the Internationally recognised ISO and BS EN Management Standards.

Do you want to get ahead of your competition? Win more tenders or save time and money on reoccurring issues? Contact us today on 0330 058 5551 or email info@isoqsltd.com.

Alternatively, you can request a quote by filling out our enquiry form and a member of our team will be in touch shortly.

Related Posts

ISO QSL Awards

ISO QSL Finalists for Three Awards

4 May, 2022

We’re pleased to announce that we have been shortlisted for three Chamber Business Awards with the Herefordshire and Worcestershire Chamber of Commerce.

Bird & Amy Take the Plunge for NCW

26 Apr, 2022

Client Care Advisors, Bird Hancock and Amy Taylor will soon be taking the plunge in a sponsored tandem sky dive.  Can you help them reach their fundraising target?

Good Egg Awards Ceremony 2022

1 Apr, 2022

This year, we had a record number of nominations for our Good Egg Awards….. 102!

We want to say congratulations and well done to all the nominees, finalists and winners.

 

Fancy a Spot of Tee?

31 Mar, 2022

Picture this, bacon butties, a spot of tea (or coffee) and a round of golf… sound good? Then join us for our annual charity golf day…