Praesto Group has achieved certification to ISO/IEC 27001, the internationally recognised standard for information security management. The certificate was issued by the British Assessment Bureau, a UKAS-accredited certification body.
It covers our data consultancy services, data and insights, enterprise performance management, customer relationship management, and managed services and support, delivered to customers around the world from our companies in the UK, Ireland, France, Portugal and the United States, including our offices in London and San Diego.
What is ISO 27001?
ISO/IEC 27001 is published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Organisations use it around the world, including in the United States, where clients often ask for it alongside or instead of a SOC 2 report. It doesn’t just check a single system. It certifies how an organisation manages information security as a whole: its people, its processes and its technology.
To achieve it, an organisation builds an information security management system (ISMS). It has to:
- identify the risks to the information it holds and decide how to deal with each one
- put controls in place, from access management and supplier checks to staff training and incident response
- show that its leadership is accountable for all of it
Why it’s demanding
Certification takes a two-stage audit by an independent certification body. The first stage reviews how the system is designed. The second tests whether it actually works day to day. After that, the certification has to be kept up: auditors return every year, and full recertification comes every three years. The standard also requires continual improvement, so the system must get better over time, not just stay in place.
Who does the auditing matters too. The British Assessment Bureau is accredited by UKAS, the UK’s national accreditation body, which means the certifier is itself regularly checked. Through the International Accreditation Forum (IAF), UKAS-accredited certificates are recognised by accreditation bodies around the world, including in the United States.
Part of our commitment to cyber security
Clients trust us with their data and with their finance, performance and CRM systems. ISO 27001 shows that we manage information security deliberately across our companies, with leadership involved and not just IT. It also shapes how we work on client engagements: how we handle client data, who can access it, and how we check the suppliers and tools we use.