What is ISO? It is the acronym for the International Organization for Standardization, which defines standards for products, services and management systems. ISO, which has a membership of more than 160 national standards bodies, was established in London in 1947. One of the founders was the Polish Standards Committee.
Some years ago, we started collaborating with Toyota Financial Services (TFS). They sent us a form with a series of security requirements which basically corresponded to those for the ISO 27001 standard. We undertook to go through the certification process. Working with a consultancy firm, we compiled the relevant documents and we also underwent an audit organised by the client. That involved four auditors. They came from Brussels, Frankfurt and London and spent four days at MakoLab. In the end, we began collaborating with TFS and, at the same time, continued working towards certification.
Next, we turned to Marcin Kowalczyk, process and security expert and the head of our Compliance Unit.
Operating in line with the standards of certificates like ISO is testimony to an organisation’s maturity. Companies that have been awarded certificates reach a wider group of clients. But building an organisation that functions on the basis of those standards means building the awareness of everyone within it, at every level.
Back to Włodzimierz for some more advice!
It’s simple:
Of course, these are all fundamental things that apply to all of us. They might seem trivial at times, but it most often transpires that, at some stage, we’ve all failed to comply with these rules, which are so simply, but so essential to security.
The recent scandal concerning Polish politicians’ use of private e-mail accounts for work-related matters is a case in point. Some might find it amusing, but is it really all that funny?
As Paweł Wojtunik, a former head of the Central Anti-Corruption Bureau and security expert put it in a conversation with the Wirtualna Polska (Virtual Poland) website: