ISO/IEC 27001 is the world’s best-known standard for information security management systems (ISMS). Obtaining the certificate demonstrates strong commitment to information security and building trust with clients, partners, and stakeholders. The certificate applies also to Enento Group companies Suomen Asiakastieto in Finland and UC in Sweden.
“With cyber-crime on the rise, it is essential to be aware of the risks and proactively identify and address possible weaknesses. Receiving this certification is the result of dedicated effort, and I would like to extend my gratitude to everyone who has contributed to developing our information security practices over the past years”, says Karl-Johan Werner, Chief Data & Analytics Officer of Enento Group.
ISO/IEC 27001 standard promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence. To confirm compliance, surveillance audits are required annually. The first Enento Group surveillance audit will take place during 2025.
“Security and trustworthiness are our priority in everything we do. Implementing the information security framework specified in the standard helps us to reduce vulnerabilities to the growing threat of cyber-attacks, prepare our people and processes to face technology-related risks and ensure that our assets remain undamaged, confidential and available for our customers as needed”, says Per Bäckström-Grå, Head of Security at Enento.
For more information:
Karl-Johan Werner
Chief Data & Analytics Officer
Enento Group
karl-johan.werner@enento.com
+46 72 853 50 05
Per Bäckström-Grå
Head of Security
Enento Group
per.backstrom-gra@uc.se
+46 739 144 184
About the certificate
The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.
Conformity with ISO/IEC 27001 means that an organization or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.