IT Department Achieves ISO 27001 Certification

The IT Department has recently achieved ISO 27001 (Information Security) certification. ISO 27001 is the only auditable international standard which defines the requirements for an Information Security Management System (ISMS). The standard aims to ensure the provision and maintenance of adequate and proportionate security controls through a system of continual review and improvement and is designed to protect the confidentiality, integrity and availability of information content and systems in line with business need.

We have been asked about our compliance status on many tenders and are pleased to be able to report our certification on future submissions. In addition the auditor commented "It is clear that a significant commitment has been made in establishing the Information Security Management System”.

This achievement endorses the VINCI PLC Director’s Manual 2010 (section 1, C.6) where Richard Francioli, VINCI Chairman states that we have a responsibility to:

"...implement procedures making it possible to guarantee the security, integrity and confidentiality of information in compliance with the legislation in force"

Published: 18/03/2010