primion Technology GmbH is the first company in Germany to receive ISO/IEC 27001 certification for information security in the sector of "Time & Security". In this way, primion Technology GmbH offers its customers more trustworthiness and security. Customers do not have to carry out their own audit to ensure their information security requirements.
Data security is guaranteed
The TüV SÜD auditor carried out the audit at the headquarters in Stetten on the cold market; TüV SÜD Management Service GmbH was subsequently responsible for the veto check, which was successfully completed on 30 September 2019. This makes the IT system house for access control, time recording and security technology the only company in Germany to date with a certified information security management system in the "Time & Security" area.
Competitive advantage and security gain
ISO 27001 encompasses a comprehensive security concept independent of industry and size that reflects the company's self-interest. The implementation of the security concept and the additional certificate for information security that has now been acquired are a clear competitive advantage for primion. They impressively document that the legal requirements are met, that the (IT) risk can be recognized and classified within the company and, above all, that it can be minimized, thus guaranteeing customers and clients a high standard.
The legislator does not require this certification according to ISO 27001. Irrespective of this, ISO 27001 facilitates compliance with legal requirements and offers many entrepreneurial advantages. With this certification it can be proven, for example, that the security requirements, the technical and organisational measures in accordance with Art. 28 DSGVO (contract processors), Art. 5 DSGVO (processing principles), Art. 32 DSGVO (security of processing) and § 64 BDSG (data processing security requirements) are fulfilled and complied with.
Information security according to ISO/IEC 27001
- Confidentiality: Protection of information against unauthorized disclosure (Confidentiality)
- Integrity: Protection of information from modification, insertion, deletion, reordering, duplication or replay (Integrity)
- Information availability: Ensuring the accessibility and usability of information for authorized instances (Availability)
- Authenticity: Authenticity of information or identities.
- Attributability: assumption of responsibility, accountability and/or liability for information values (Assets)
- Commitment: Nobody can deny or deny the sending or receiving of information (Proof of Origin, Proof of Delivery).
- Reliability: Ensuring consistent behaviour and delivery of intended results by a person or entity (Consistent Delivery).
ISO/IEC 27001 thus secures sensitive corporate values in the long term.
