ISO 27001 is more than a stamp on a document. It is proof that every risk weighing on infrastructure and data has been identified, assessed and covered.
At France-IX, we decided to start this certification process, which formalises a security policy that has been in place for a long time: risk mapping, access control on physical and network infrastructure, business continuity and disaster recovery plans, incident management, GDPR compliance…
All of these workstreams are there to protect us and our customers, even before certification comes into play.
But today, France-IX is opening up to a more diverse and more demanding clientele: corporate companies and tenders where this certification is a prerequisite that proves everything that has been put in place.
And when a customer asks for proof that the infrastructure is in good hands, ISO 27001 simplifies the equation and cuts down on long explanations and justifications. Because the documents requested are an integral part of what has to be produced anyway to obtain the certification.
We were also already carrying out regular audits (network infrastructure, servers, information systems, audits of the code we develop in-house for our tools…) conducted by external auditors.
A certification is always an investment, in human, financial and organisational (process) terms alike, but in our case it is a logical next step and a formalisation of the work already done.
Our commitments
This news was first published on LinkedIn. To comment or share it, head to the original post. → See the post