Management of Information Security on the rise

23 Mar, 2013

ISO 27001, Information Security, Management standard, ISO 27001 certification

With the recent headlines identifying areas of major security breaches, SME businesses are now turning to the ISO 27001 information security management system to help protect their businesses against cyber threats and ensure there are no vulnerabilities in their existing systems.

More and more companies are now realising that possession of a security policy by itself does not prevent breaches; staff need to understand it and put it into practice. Only 26% of respondents with a security policy believe their staff have a very good understanding of it; 21% think the level of understanding is poor.

The Economist 2002, explained that: “The human side of computer security is easily exploited and constantly overlooked. Companies spend millions of dollars on firewalls, encryption and secure access devices, and it’s money wasted, because none of these measures address the weakest link in the security chain;  the weakest link is people” .

According to one survey conducted by Infosec (2012) 70% of large organisations detected significant attempts to break into their networks in the past year. The average cost of the worst security breach for large organisations was between £110,000 and £250,000 whereas for small business the cost ranged from £15,000 to £30,000. The root cause, the survey report said, was often the failure to invest in educating staff about security risks, with 75% of organisations where the security policy was poorly understood experiencing staff-related breaches.

It’s important to remember that threats to information security do not come through IT alone. Unhappy staff, resentful ex-employees, deceitful managers and competitors can all have access to your confidential information and can use this to the detriment of the business and its reputation. This can be purposeful or accidental. Information is not confined to electronic format but encompasses all forms of communication including verbal and hard copy.ISO 27001 Certification
By implementing a robust information security system like the ISO 27001, ensures that adequate training and records are in place for all staff so that they know what is expected of them. This can prevent most accidental breaches of security and ensure that the company is reviewing their policies on a regular basis to keep up to date with the advancements in technology.


ISO Quality Services Ltd are proud to specialise in the implementation and certification of the Internationally recognised ISO and BS EN Management Standards.

Do you want to get ahead of your competition? Win more tenders or save time and money on reoccurring issues? Contact us today on 0330 058 5551 or email info@isoqsltd.com.

Alternatively, you can request a quote by filling out our enquiry form and a member of our team will be in touch shortly.

Related Posts

Extension to the New UKCA Marking System

16 Nov, 2021

Businesses have been given an extension on the adoption of the new UK Conforming Assessed (UKCA) marking system following Brexit. Find out more here…

Climate Deal Struck at COP26

16 Nov, 2021

After overrunning, a deal has finally been struck at COP26.  Get the details on the Glasgow Climate Pact and steps you can be taking today in the race to net zero.

5 Ways ISO 9001 Supports Sustainability

5 Nov, 2021

It’s World Quality Week! A time to celebrate your quality achievements as well as the efforts and contributions of quality professionals.  The focus this year is ‘Sustainability: Improving Our Products, People and Planet’.  With the COP26 summit taking place, we couldn’t think of a better focus for this year.  So how exactly does ISO 9001 support sustainability?

Three Steps to Start Your Net Zero Emissions Journey

22 Oct, 2021

Organisations are being urged to act now and set out their plans of becoming net zero.  Here are three simple steps you can take to start your journey today.