What is ISO 27001?
ISO/IEC 27001 is the international standard for information security management systems. It defines how an organisation systematically identifies, assesses and treats risks to information, and how it continually reviews and improves its safeguards.
Why does it matter for elvadata?
We run systems, data and access for our clients, from ERP and CRM to hosting in a Swiss data centre. Security is our top priority. Aligning with ISO 27001 ensures that we implement information security in a structured and verifiable way.
How do you benefit as a client?
- Clearly defined access: only authorised people can access your data.
- Defined procedures for emergencies, so operations are restored quickly.
- Safeguards that are regularly reviewed and improved.
- CISO expertise for your information security questions.
Which topics does the standard cover?
The current version, ISO/IEC 27001:2022, groups its 93 controls in Annex A into four themes:
- Organisational controls, such as policies, roles and supplier management.
- People controls, such as training and awareness.
- Physical controls, such as access to premises and protection of equipment.
- Technological controls, such as access rights, backups and logging.
What does this look like day to day?
Information security is not a one-off project. We regularly reassess risks, review permissions, test backup recovery and document who does what in an emergency. This way of working is built into our IT services and into operations in our Swiss data centre.
How does a Security Operations Center complement the ISMS?
An ISMS defines rules and procedures. A Security Operations Center ensures that suspicious activity in connected systems is noticed at night and at weekends too. As an Arctic Wolf Premium Partner, we offer this monitoring. Find out more on our security page.
Read what ISO 27001 means when choosing an IT partner in our guide ISO 27001 for SMEs.