The annual audit by the Certification Body on Quality, Information Security and Health and Safety Management Systems was successfully completed on the 14th of November on the work led by Lepida, confirming the ISO 9001, ISO 27001, ISO 27017, ISO 27018 and ISO 45001 certifications.
The verification has permitted the transition from the 2013 to the 2022 version of the ISO 27001 standard, that updates the controls to be carried out in order to implement, maintain and continuously improve an Information Security Management System.
In particular, the new Annex A makes the standard more current through an overall restructuring of controls (now 93) and the introduction of new checks related to: deletion of information, obfuscation and prevention of data loss (with reference to GDPR); Secure configuration; Safe code development; Web browsing filtering; Threat hunting; Cloud services; Business continuity; Physical security monitoring.