IT Governance encourages ISO 27001 compliance to boost third-party cybersecurity
A recent report into the security practices of 40 Wall Street banks found a strong need for improved supply-chain security.
An organization’s security is only as good as that of its suppliers
ASHLAND, OHIO, USA, May 11, 2015 /EINPresswire.com/ -- A recent report into the security practices of 40 Wall Street banks and other financial institutions conducted by the New York Department of Financial Services found a strong need for improved supply-chain security.— Alan Calder, founder and executive chairman of IT Governance
One-third of surveyed banks do not require third-party vendors to alert them about information security breaches or cybersecurity intrusions, nearly half do not conduct on-site assessments of third-party vendors, and one-third do not require third-party vendors to mandate similar cybersecurity requirements.
Alan Calder, the founder and executive chairman of international information security provider IT Governance, advises that financial institutions are not alone in needing to establish the security of their supply chains:
“An organization’s security is only as good as that of its suppliers. A number of high-profile breaches, such as the one that hit Target in late 2013, were caused by lax third-party security. As a consequence of such occurrences, we are beginning to see clients demanding that their vendors put more stringent cybersecurity controls in place, such as those set out in the international standard ISO 27001.”
ISO 27001 sets out the requirements of an enterprise-wide information security management system (ISMS), a risk-based approach to information security that encompasses people, processes, and technology, enabling organizations of all sizes, sectors, and locations to implement and maintain security controls to mitigate the specific threats they face.
Accredited registration to the Standard enables organizations to demonstrate that they are following a best-practice approach to information security, and many ISO 27001-registered organizations also require their suppliers to implement the Standard in order to guarantee the security of the supply chain from top to bottom. ISO 27001 registration allows organizations to win more business because of this very fact, which is one of the reasons ISO 27001 registration in the US is increasing.
Thanks to IT Governance’s fixed-price ISO 27001 Packaged Solutions, US organizations can now take advantage of expert ISO 27001 consultancy to implement the Standard for as little as $15,030.
With their unique combination of standards, books, toolkits, software, training, and online consultancy, IT Governance’s packages provide US organizations with all they need to implement the Standard and ensure their cybersecurity.
For more information: www.itgovernanceusa.com/iso27001-solutions.aspx.
Alternatively, organizations can call IT Governance toll-free on 1-877-317-3454 or email servicecenter@itgovernanceusa.com for more information on how IT Governance can help protect their information security.
Melanie Watson
IT Governance
0845 070 1750
email us here
Legal Disclaimer:
EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.