Certification ISO 27001

Following an audit and certification process initiated in August 2013, SMART Integration obtained in January 2014 the certifications for the implementation of the Quality Management System, Environmental Management System and Occupational Health and Safety Management System, according to the requirements of ISO 9001:2008, ISO 14001:2004 and OHSAS 18001:2007.

In April 2014 we obtained certification for the implementation of the Information Security Management System according to the requirements of ISO/IEC 270001:2005.

ISO 27001

ISO 27001 is the formal instrument through which an organisation may turn the issue of information security into a performing management system which can be audited and certified.

The implementation and certification of an information security management system is one of the choices any organisation valuing the company and customer information security should make.

Following the main objective of the information security management system implemented by our company (to control information risks and to identify the types of threats to assess all approaches and protection methods in order to protect our company) we undertake:

• Systematically analyse all information security risks, considering all types of threats or vulnerabilities within the company;
• Permanently monitor and update the entire information security control process and risk management actions for unacceptable risks;
• Implemented a system ensuring that all appropriate security measures are in place, according to the company needs.

By implementing the Information Security Management System in SMART Integration ne we intend:

• To meet our business partners’ requirements by emphasizing security checks;
• To obtain competitive advantages in the market;
• To promote the company image as a sound business partner;
• To reassure our beneficiaries and to demonstrate our involvement in reducing information security risks.