ISMS certification of the Modis ITO
Since November 2019 Modis ITO is officially certified according to ISO/IEC 27001. The content of the certification is the standard-compliant structure and effectiveness of the Information Security Management System (ISMS). The certification underlines the importance of security for information, data, processes and systems.
In November 2019, auditors put the newly introduced ISMS of Modis ITO through its paces and addressed the central question of whether all processed information complies with the specified standards with regard to availability, integrity and confidentiality. The audit was preceded by an intensive period of preparation with risk analyses, process descriptions and employee interviews.
"The aim was to achieve successful certification in 2020, for us, our customers and business partners. The certificate now also represents to the outside world what has long been a standard for us internally," summarizes Managing Director Martin Wimmer.
The ISMS of Modis ITO is intended to protect all processed data from unauthorized access as well as from loss and falsification. For this purpose, the provider of IT support has appointed its own information security officer, who reports directly to the management. Together with the data protection officer, he monitors the system, internal processes and documentation. Possible risks can thus be identified and appropriate measures initiated if necessary.
The ISMS of Modis ITO will be reviewed annually from now on. The aim of this is not only to maintain conformity with DIN ISO 27001, but also to continuously review and improve processes.Every three years a re-certification is achieved by means of a new audit.