“We are proud that our activities in the field of information security meet such high standards and that as a result we have proven that we are reliable partners to customers, suppliers, and employees,” said Marco Nabinger (pictured), head of IT/Security at Rutronik. “In this era of increasing digitisation, every company must ensure that its information and data are secure. Increasingly frequent and targeted attacks, constantly evolving malware, and a virtually unlimited number of attackers with creativity and motivation that seems to know no bounds make handling information securely a top priority for management.”
Scope of the ISO 27001 Standard The ISO 27001 standard is complex and consists of several components: information security policy, organisation of information security, human resources security, asset management, access control, cryptography, physical and environmental security, operational security, communications security, system acquisition, development and maintenance, supplier relationships, information security incident management, information security aspects of operational continuity management, and compliance/conformity.
To receive certification, all of these criteria must be fulfilled.