|
MANAGEMENT consultancy and outsourcing company Accenture
Philippines has gained an ISO 27001 certification for
its business process outsourcing (BPO) operations in the
country.
The same
international standard certification was awarded to the
company’s technology services last year.
Conferred by the British Standards Institute
(BSI)-China, a leading certification body, the ISO 27001
certification is the new industry standard for
information security management system (ISMS).
With
this, Accenture guarantees confidentiality, integrity
and availability of the valuable information it manages
internally for the company and in its clients’ behalf.
“We take
pride in providing our global clients and company
stakeholders the assurance of a comprehensive
information security management system that ensures
business continuity amid today’s threats,” explains Beth
Lui, country managing director, in a statement Monday.
She said
that passing the hurdles for ISO 27001 certfication
reinforces Accenture’s credibility as a leading global
delivery services company for both information
technology and business processes and its commitment to
provide the highest quality industry standards of
services to its clients.
BSI-China recommended the certification of Accenture BPO
to ISO 27001 standard last June, with the company
subsequently passing the audit. The certification covers
the non-voice processing operations of Accenture’s BPO
business in the country, which includes service delivery
operations, client services organization, business
operations organization and shared support services.
An ISMS
is a systematic approach to managing and ensuring the
security of critical company information. It provides a
set of management standard specifications on the types
of security controls that an organization should
implement to recognize and address security risks by
establishing controlled procedures, policies, and best
practices for information, personnel, network and
physical security.
ISO/IEC
27001 is the only auditable and certifiable
international standard, which defines the requirements
for an ISMS and is designed to ensure the selection of
adequate security controls to help protect a company’s
information assets and to give confidence to any
interested parties, particularly an organization’s
customers. |
