Evolver’s information security practices confirmed by ISO 27001:2013 certification

It is no secret that cybersecurity and cyber risk are at the top of the agenda at Board of Directors meetings across the globe.  Every organization is a potential target of an information security breach. In 2018, most organizations will scrutinize and refine their cyber practices (or at least they should be).

The stakes are raised for data protection when data sets include financial information, healthcare information, personally identifiable information (PII), or clients’ information.  On that note, as an organization, CISOs must carefully consider what outside vendors have access to their data through storage, end point, or other methods (click here if you need a CISO Support as a Service).

Where do you start  in securing data?  The first question, and perhaps the only question, is to find out if your cybersecurity provider, technology integrator, data storage provider, eDiscovery provider and others are ISO 27001 certified.  This certification really makes a difference in the overall security of the organization.

ISO 27001 is the stringent evaluation of cyber and information security practices. Based on an international set of requirements, ISO certification is a third party confirmation of an organization’s information security practices. It includes how data is handled, how data is protected, and the integrity of connections, the environment, and infrastructure.

Many people are familiar with the ISO standards as they are a requirement for federal contracts (especially ISO 9001:2015 for quality management).  The ISO 27001 is different from that standard due to its cybersecurity and cyber risk focus, as well as it applies directly to, and is important for, commercial and federal organizations.

Here’s an action item:  Send an email to your vendors and partners who store or have access to your data or applications.  Ask them:  Are you ISO 27001 certified?  And see what happens next.

Evolver is officially ISO/IEC 27001:2013 certified

This serves as a confirmation that Evolver’s overarching framework through which we identify, analyze, and address our information risks – for our clients and for our company.  All of our systems have been evaluated and accepted by this elite standard. Our documented Information Security Management System (ISMS) is the basis of this certification.

What Evolver’s ISO/IEC 27001:2013 certification means for federal and commercial organizations seeking information and data security as well as improved cyber risk posture:

• Data is secure.
• The people, processes, and IT systems handling sensitive information are part of a risk management process.
• Evolver has established, implemented, maintains and continually improves our information security management system.

The heart of Evolver’s work is in data management and data protection.   All of our information technology services surround data: cybersecurity and cyber risk quantification, cloud, legal technology, analytics, application development, and infrastructure. One reason for our success and our clients’ satisfaction is due to the consistent care we take towards protecting that data, and that we have the proper measures in place to protect that data.

Our ISO/IEC 27001:2013 certification shows that Evolver utilizes an information security management system (ISMS) for managing the security of assets, including: financial information, intellectual property, employee details, and information entrusted by third parties. An ISMS is a systematic approach to managing sensitive company information so that it remains secure. Our risk management process is applied to people, processes, and IT systems.

ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS).

This certification includes Evolver’s professional services:

• system architecture and network engineering
• application development
• data center deployment and operational support
• human capital planning and assessments
• financial services which covers the data and information of both Evolver and its clients

Evolver’s Quality Standards Extend Across All Information Technology Business Lines

An important element of our success in information security is our commitment to quality in our services, processes, and policies. Evolver recently recertified in two areas.

RE-CERTIFIED: ISO 9001:2015

Evolver is committed to quality management as evident by our ISO 9001:2015 re-certification.

The standard covers our delivery of professional services including:

• system architecture and network engineering
• application development
• data center deployment and operational support
• human capital planning and assessments
• financial services

What Evolver’s ISO 9001:2015 certification means for federal and commercial organizations:

Our effective quality management system allows for increased operational efficiency, proper processes, better documentation, greater employee awareness about quality, customer satisfaction, and increased credibility, among others.

REAPPRAISED: CMMI LEVEL 3

CMMI is a process improvement approach that provides organizations with the essential elements of effective processes that ultimately improve their performance.

What our CMMI maturity level 3 rating means for federal and commercial organizations:

• Our work and processes have received the highest form of third-party validation.
• We take a proactive approach to managing projects and processes.
• We’re dedicated to continuous improvement and producing great work that makes a difference.