Heritage Bank attains ISO 27001 Information Security Management Certification

By Chioma Obinagwam

Heritage Bank Plc, Nigeria’s most innovative banking service provider, has achieved the Information Security Management Certification from International Standards Organisation (ISO).

This certification also known as the ISO 27001: 2013 is part of the ISO 27000 family of standards which helps organisations keep information assets secure. The certification was achieved on the heels of the bank’s drive to revolutionalise the banking sector digital experience with Octopus, by putting in place a systematic approach to managing sensitive organisational information, ensuring it remains seamless, secure and available.

The Octopus platform owes numerous benefits to the users, thereby enable small businesses key into electronic payment system easily, efficient collections, social integration, retention strategy, bills payment,mobile virtual top-up, funds transfer, balance enquiry, movie show time, news.

With the introduction of Octopus, the ISO 27001: 2013 Information Security Management Certification is proof of the Bank’s demonstrated ability to consistently provide products and services that gives service consumers and customers an easily recognisable security hallmark.

Speaking on the award received, The MD/CEO of Heritage Bank Plc, Ifie Sekibo reiterated the bank’s commitment for secured services, whilst assuring customers that their information is appropriately protected and, as such, reduces the need to undertake time consuming and costly onsite security audits reducing time and cost for both parties.

According to him, the certification demonstrates credibility and trust, which reduces customer and supply chain audit and ISO 27001 certification reduces third party scrutiny of your Information Security Management by customers and the wider supply chain.

“The achievement of ISO 27001 will differentiate two competing organisations in the market place, providing a valuable competitive advantage. Increased legislative and regulatory compliance ISO 27001 supports compliance with relevant laws such as the Data Protection Act 1998 and software copyright legislation. This in turn reduces the risk of facing prosecution and fines. An organisation’s liability in security incidents may be reduced if it is certified ISO 27001 compliant,”

He further explained that it reduces customer and supply chain audit, stating that ISO 27001 certification reduces third party scrutiny of your Information Security Management by customers and the wider supply chain.

As ISO 27001 is the current international benchmark for Information Security Management, it is increasingly recognised that compliance with the standard is supportive evidence of adequate security. Considerations and outcomes To achieve ISO 27001 certification, an organisation must produce documentation that demonstrates that it has developed an Information Security Management System that complies with the standard. Organisations should consider producing most of this documentation even if they are not going for certification as it provides a best practice approach for compliance as well.

There are three key issues to note about the standard: Its generic requirements mean that it is applicable to all organisations, regardless of size, type or nature. However, you tailor it to the exact needs of your organisation through the information security controls that you select to implement within your Information Security Management System. It takes a flexible, risk-driven approach. It is dynamic – it focuses on continual improvement and helps the organisation keep ahead of changes both within and outside the organisation.