Meeting the security standard

Identifying, evaluating, treating and managing information security risks are key processes if businesses want to keep their information safe and secure. As a supplier entrusted with a wealth of valuable client data, Axxia recognises the importance of committing oneself to the highest standards in such matters. That's why we are now working towards implementing ISO 27001 across the entire company. As the Sheffield Office is responsible for data validation, disaster recovery and outsourcing services (services available to non-Axxia clients), and therefore dealing with customer data every day, it seemed sensible to prioritise the implementation and assessment of ISO 27001.

We're pleased to say that our Sheffield Data Validation Service was successfully certificated last year and now we’re rolling out the programme to the remainder of the firm starting with the Support operation.  Assessment is due in November 2007. The Axxia Forum members have spent many months studying all aspects of the Information Security Management System (ISMS): this included reviewing the ISO 27001 requirements, assessing and evaluating the risks, implementing controls to treat the risks, monitoring and reviewing the risks, and maintaining and improving the system of risk controls.

Commenting on the achievement, Stuart Holden, Axxia's Managing Director, said, "One of the biggest concerns of the modern law firm is the adequate protection of often highly sensitive data. ISO 27001 should give them the confidence that we are working to deliver all the required processes and controls to keep that data safe and secure. Legal technology is no longer the cottage industry of two decades ago - it needs to adopt the quality assurance practices of the mainstream IT industry and as the UK's largest independent supplier, we're determined to lead from the front."

Published on: 26-07-2007