Recent years have shown us that without a dynamic information technology sector, our lives would have been much more difficult. Equally, cybercrime continues to be a significant risk, costing money and damaging customer and stakeholder trust.
In this interview, Dora Mindakis, Technical Sales Specialist and Saad Kazmi, Program Manager – Cyber and Information Security at SGS, explain why you should strive to protect your data. They consider the challenges involved and explore possible solutions for your organisation.
Why do we need to be concerned about digital security?
Dora Mindakis: In today's digital age, it's becoming increasingly common for our personal and sensitive information to be required for transactions. Unfortunately, this means that the risk of our information falling into the hands of threat actors or cybercriminals is higher than ever. Organisations that fail to invest in digital security run the risk of irreparable reputational damage, loss of customer confidence and significant financial losses.
Recent security breaches at Optus and MediBank are a stark reminder of the vulnerabilities organisations face. COVID and working remotely have really exposed the importance of protecting all categories of data from theft and damage. This includes sensitive data, personally identifiable information, health information, intellectual property, government, and industry information systems irrespective of an organisation’s size.
Saad Kazmi: In today's fast paced business world, companies are constantly exploring new technologies to boost their bottom line. However, with these advancements come new challenges, one of the most pressing being cyberattacks. As businesses strive to safeguard their critical systems and confidential information from cyber threats, they must also comply with legislative and regulatory requirements.
To stay ahead of the game, many companies are adopting more convenient methods of carrying out their operations, such as storing data on the cloud. While cloud services like Google, Amazon Web Services and Microsoft offer convenience, they also raise the risk of a successful cyberattack or data breach. Therefore, it's crucial for businesses to be aware of this threat and take proactive measures to protect themselves.
Why does an organisation need to manage its information security?
Dora Mindakis: As upholders of highly sensitive customer data, organisations are responsible for protecting their information assets. Not only does this make it easier to manage and improve their operations, but it's also their obligation to safeguard sensitive data about their customers (like their personal identifiable information) from prying eyes. After all, we're reminded daily of the disastrous fallout that can occur when data falls into the wrong hands. So don’t let your organisation be the next headline – prioritise information security today!
Saad Kazmi: In today's digital age, information is constantly under threat from a growing number of risks. From malicious code to phishing and sophisticated cyberattacks, it's become increasingly difficult for organisations to keep up with the ever-evolving dangers. That's where an Information Security Management System (ISMS) comes in – by providing a mechanism to prevent, detect, and respond to internal and external threats, helping organisations protect their technology and information assets.
Additionally, it creates a culture of security awareness within the company, which is vital for safeguarding employees and businesses from reputational risks. No organisation wants to become the next news headline like Medibank or Optus. Invest in an ISMS today and protect your organisation from the relentless threats of the digital world!
What is the ISO 27001 (ISMS) standard all about?
Saad Kazmi: ISO/IEC 27001 is a vital international standard for organisations looking to safeguard their information assets. By specifying requirements for an ISMS, ISO/IEC 27001 provides a framework for managing and protecting information assets, including developing and implementing appropriate controls and measures to address identified risks. The Information System Management System supports organisations in managing their risks through well-defined processes, information assurance and continually improving the business processes.
What are the benefits of ISO 27001 certification to a business?
Saad Kazmi: With certification, you are communicating to consumers and stakeholders that you are operating within a proven framework to deliver customer satisfaction and adhere to regulatory requirements. Certification also offers you:
- Enhanced credibility
- Greater awareness of information security within the organisation
- Reduced risk of fraud, information loss and disclosure
- New business opportunities with security conscious customers
- A demonstration of the integrity of your system
- Better preparedness for the next security event or incident
What’s the process to get certified?
Dora Mindakis: The process is straightforward, and we will take you through it.
- Application and quote: obtain a quote for your certification project
- Competence: identification of any skill or competence gaps your staff may have
- Gap assessment: identification of any weaknesses
- Stage 1: confirmation that implementation of the management system is on the right track
- Stage 2: confirmation that the management system is fully implemented
- Certification: share your success with the world
- Ongoing improvements: regular surveillance visits to ensure your management system continues to operate effectively
For further information, please contact:
Dora Mindakis
Technical Sales Specialist
t: +61 483 334 647
About SGS
We are SGS – the world’s leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 97,000 employees operate a network of 2,650 offices and laboratories, working together to enable a better, safer and more interconnected world.
