Contract on application of Information Security Management System signed

The Data-Processing Centre (DPC) of the Ministry of Communications and Information Technologies of the Republic of Azerbaijan and Romanian "CertSIGN S.A." company have signed a contract on rendering consulting services for installing and operating the Information Security Management System (ISMS) at DPC according to ISO/IEC 27001:2005 (AZS-494-2010) standard’s requirements.

This information was provided to ICTnews by the head of DPC’s Certificate Services Division Arif Maliyev. The contract was signed with the purpose of verifying compliance of the current DPC’s information security with ISO/IEC 27001:2005 (AZS-494-2010) standard, giving recommendations on the installation of ISMS based on the results of analysis of security risks and organizing trainings for preparing DPC’ personnel to the certification audit.

The "CertSIGN" company is offering complex integration solutions for security, communications and information as well as technology and civil engineering projects to its customers in almost every country of the world. As to the security management, CertSign has successfully passed the "Ernst & Young" security audit of conformity to ISO 270001 international standard.

The period of the contract is 6 months, including 2 month trial operation of ISMS. Within the project, discussions have been held with employees of CertSIGN regarding ISMS. The sides reached agreements in the scope and goals of ISMS, and in preparing the initial project plan.

Trainings were organized for local specialists to teach them ISMS basics. The organization of the ISMS forum was also discussed. Heads of all departments involved in ISMS’ activity are expected to take part in this forum, which will be held once or twice a year at DPC.

The forum, which was created with the aim of keeping ISMS under permanent control, will reflect in ISMS related documents any changes made to the system.

---