Information Security ISO27001
As with most modern organisations, information is the lifeblood of Lyons Davidson. Lyons Davidson receives, processes and outputs a significant volume of information that is either commercially, professionally or personally sensitive. As such, we recognise that we have a legal, professional and moral responsibility to protect that information from unauthorised or accidental modification, loss, leakage and theft.
Following on from our success in obtaining the IS014001 Accreditation, we decided to seek ISO 27001 accreditation. This standard covers Information Security and puts in place the procedures required to demonstrate that the information we hold remains confidential, accurate and available to the appropriate users. The security of our data is an essential part of our business. We were increasingly being called upon by our major referrers to demonstrate how we deal with this issue, and seeking ISO 27001 accreditation was an important step for us to take, both in terms of our commitment to providing a quality service to our clients and business partners by reassuring them that information security is taken seriously within the firm, and in terms of having recognised processes in place to deal with information security threats and issues.
The scope of the Information Security Policy for our accreditation currently covers the Bristol offices within Insurance Litigation services, but the application of the processes involved in ISO 27001 will affect everyone throughout the firm. The plan is to extend the scope gradually, to include the whole firm.
ISO 27001 requires us to deal with all issues which may impact on information we receive, hold or send in a certain way and to have a recognised policy and set of documented procedures governing these dealings. We now have these policies and documented procedures in place, covering most aspects of our business, including:
- IT policies and applications
- physical premises security
- staff recruitment
- financial data and accounts
By seeking ISO 27001 accreditation, we have again shown ourselves to be innovators and market leaders amongst our peers.
Contact: Fraser Clark