• Florence Evans

Acumen is awarded ISO27001:2013 certification

We are excited to announce that we have achieved ISO27001:2013 certification, awarded to us from BSI.

Information Security has always been a top priority for us at Acumen. Using a risk-based approach, we have refined our existing policies and processes to formalise our Information Security Management system (ISMS) enabling us to achieve certification in a short timescale.

We have been certified within our HQ office, our software development tools and processes, our hosted products as well as all of our consulting solutions.

We achieved ISO 27001 certification within 6 months of starting the project, our robust ISMS will ensure we continuously improve our information security and we will be audited by BSI on an annual basis. Our employees are continuously trained on Information Security specifically around new threats, cyber security, data breach as well as protection for our physical environment and equipment.

The benefits are numerous, but the key takeout for our clients is that they can be assured we have implemented best practice information security controls. Additionally, it will allow us to work closer with current and future clients who require the high level of certification as a matter of compliance. It will also reduce the need for many in-depth security questionnaires and/or audits saving time for all involved.

ISO27001 is the international standard for the implementation of a formal Information Security Management System (ISMS). The certification was developed to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an information security management system."

An ISMS is a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes and IT systems by applying a risk management process.

Find out more about the BSI

To find out more about ISO27001:2013 and the BSI, check out their website here.