ISO27001

Maxima's Networking division became certified to ISO27001 on Information Security in September 2006. ISO27001 certification provides customers with the assurance and satisfaction of knowing that Maxima protects their information and signals to the market how serious we are about Information Security.

Maxima maintains a structured approach to managing Information Security and by implementing ISO 27001 our business saw dramatic results, including;

• A demonstration to our customers we are serious about Information Security
• Gives clients the assurance that data we are custodians of is protected
• Maxima has management commitment to Information Security
• Reduction of risk to acceptable levels (for our business)
• Comprehensive management information such as which assets are really critical to our business
• A Business Continuity Plan and testing schedule
• A cultural change throughout our company with increased security awareness
• Formal processes for risk assessment, security incident handling and change management
• Routine auditing of Information Security systems
• Six monthly external audits of our ISMS effectiveness

The idea is to protect our business by minimising the impact of security incidents and ensuring continued availability of our systems and every business strives for that.

Increasingly it is becoming clear ISO 27001 can be a foundation for IT governance that helps your business support other initiatives.

ISO/IEC 27001 is suitable for any organization, large or small, in any sector or part of the world. The standard is particularly suitable where the protection of information is critical, such as in the finance, health, public and IT sectors.