Wavex Technology is proud to announce that the entire company is now officially certified to the internationally recognised ISO 27001:2013 Information Security standard. This standard ensures that Wavex’s Information Security management System (ISMS) is compliant with the leading standard for information security.
ISO 27001 certification recognises Wavex’s dedication to managing information security using risk based management whilst considering the Confidentiality, Integrity and Availability of information. The framework of the standard allows Wavex to not only address technical risk but encompasses processes and people risks too. The standard guarantees the robustness and quality of Wavex’s ISMS. Wavex’s information security objectives are highlighted within our High Level policy which can be found here.
We are constantly challenging ourselves to improve our IT services and provide the highest security and privacy standards that meet or exceed the needs and expectations of our customers. The certification incorporates any legislations required to manage information and ensures that Wavex are always complying with GDPR and other regulations.
A rigorous external assessment audit conducted by the independent certification body (Certification Europe) who are certified by UKAS (The United Kingdom Accreditation Service), shows that Wavex have met the criteria set by the ISO27001 framework. The certification against the ISO 27001 standard adds an additional certification to our collection, alongside our existing Cyber Essentials Plus standard and numerous awards.
Getting a company-wide accreditation to ISO27001:2013 is a lengthy process. Whilst some organisations choose to include only certain processes, departments or platforms within the scope of the certification, or use non-accredited certification bodies, Wavex Technology firmly believes security is only as strong as the weakest link, as such we have opted to include the entire organisation within the scope of our certification.
Here is what Gavin Russel, CEO of Wavex Technology said about the achievement:
“I am delighted we have achieved the ISO 27001:2013 certification which helps validate our other security and vulnerability services. It is the result of a huge amount of team effort as we continue to strive to provide the best-in-class IT services to our clients. Our recent ISO 27001:2013 certification will ensure Wavex has world-class information security management system in place. To ensure we, and our clients, meet this high standard we have are also built the capability to manage this certification (and many others) within APEX® using our Governance, Risk & Compliance (GRC) module which provides our client’s strong adherence to information security standards.”
What are the benefits to Wavex customers?
Being ISO 27001 certified is testament to the fact that Wavex prioritises information security. But it also ensures the following:
- Our customer’s data is rigorously protected and allows for secure exchange of confidential information
- We proactively assess, minimize, and eliminate risks and vulnerabilities
- We’ve created a culture of security within Wavex. So, security is an inherent consideration in the way our employees work, not something we look at every few months when an audit is due.
- Operational excellence when it comes to our IT, HR, and information processes
- On-going management through our APEX® platform
