At QStory, we know that your data is everything. That\u2019s why we go above and beyond to help ensure it\u2019s secure. Our ISO\/IEC 27001 certification is just one example of that dedication, and it offers our customers a unique benefit.<\/p>\n
The International Organization for Standardization (ISO) is an independent, non-governmental organisation with an international membership of 163 national standards bodies. The ISO\/IEC 27001 family of standards helps organisations keep their information assets secure.<\/p>\n
In effect, contact centres that use our Intraday Automation platform now have complete peace of mind that the data we handle is secure. This certification means we have an information security management system (ISMS) in place that protects you far beyond the standard requirements of GDPR.<\/p>\n
To explain why, we\u2019ve broken down the ISO\/IEC 27001 certification \u2013 and what it means for your own security processes \u2013 below.<\/p>\n
ISO\/IEC 27001 is the international standard for information security. It sets out the specification for an ISMS, which is what helps protect all forms of information within an organisation. Our accreditation also includes annexes from ISO\/IEC 27017 and ISO\/IEC 27018, providing additional controls over cloud security.<\/p>\n
An ISMS increases your resilience to cyber attacks, enables you to respond to evolving security threats, and provides a central framework. That is, if you follow the best practices outlined by the ISO. Consequently, those who are accredited have proven to operate an ISMS that protects customer data, as well as prevent a range of security risks.<\/p>\n
It\u2019s not a legal requirement to adopt this standard. It\u2019s up to organisations whether they wish to reassure their customers that these recommendations are being followed.<\/p>\n
Obviously, the primary motivation is to protect your data. The nature of our business requires us to constantly process and leverage information, and without this certification, customers could rightly have questions about their security. But that isn\u2019t the only reason.<\/p>\n
As a business, ISO\/IEC 27001 allows us to refine our data management behaviours so that we are continually prepared for an attack. Our team has a firm understanding of how we use and look after data, and we\u2019re better upholding our GDPR responsibilities.<\/p>\n
We have a lot of data here at QStory. And it\u2019s essential that we minimise the number of potential avenues for that information to be misused or go missing.<\/p>\n
Generally, this certification means that there\u2019s much less risk for our customers. Because we\u2019re regularly audited to ensure we\u2019re still adhering to best practices, and because we follow the Plan-Do-Check-Act cycle that\u2019s at the heart of ISO\u2019s recommendations (which means we\u2019re continuously improving), clients can also have faith that our high standards won\u2019t slip.<\/p>\n