Sime Darby Awarded ISO 27001 Certification For Information Security Management System

Sime Darby has recently received the prestigious ISO 27001 certification for Information Security Management System (ISMS), awarded to organizations that have demonstrated that their information security management systems conform to internationally recognized standards, framework and best practices. To date, only 6,500 organisations globally have been awarded the ISO 27001 certification, of which 40 companies are from Malaysia.

This maiden certification primarily focuses on IT management and its common infrastructure shared services involving corporate security policies, security organization, asset management, human resource security, physical & environment security, communication & operational controls, access controls, system acquisition/development/ maintenance, security incident management, business continuity / disaster recovery and compliance management.

This certification would facilitate the Group to continuously ensure that critical information assets are systematically managed and controlled, hence enhancing the Group’s corporate governance and information security assurance to all stakeholders including employees, management, business partners and customers.

This certification project was initiated by Group IT in May 2009, involving key personnel from various departments. It went through numerous control implementation and reviews before being finally audited and certified by TUV Nord, a certification body headquartered in Germany. Mr. Tan Kah Chai, Group Chief Information Officer, said an organization as large and as diversified as Sime Darby requires mature information security processes and standards to ensure that it protects itself against external threats and prevent leakage of information assets. The Group’s goal is to achieve an environment where integrity, confidentiality and availability of data and systems are always assured.

Attaining ISO27001 certification takes us a step nearer towards achieving that goal. By obtaining this Information Security Management System (ISMS) certification, Sime Darby has also answered the Government’s recent call for all organizations in Malaysia, particularly the critical national agencies, to be better prepared in facing the cyber threat. Sime Darby is proud to be in the league of the only 40 companies in Malaysia that are ISO 27001 certified