India's biggest mobile phone firm earns certification to ISO/IEC 27001
06 Mar 2009
Topics: Information security, ISO/IEC 27001, India
India's largest mobile phone firm, Bharti Airtel, has been awarded certification to ISO/IEC 27001 Information security mangagement by BSI in India. Certification covers 300 locations spread over the entire country.
For Bharti Airtel, information is critical. Certification to ISO/IEC 27001 helps manage and protect valuable information assets, defining requirements for an Information Security Management System (ISMS), to help ensure adequate and proportionate security controls are in place.
ISO/IEC 27001 can be invaluable for organizations managing information on behalf of others: it can be used to assure customers that their information is being protected.
Bharti Airtel has almost 2,500 computer servers handling around 2,500 terabytes of data. This certification will help the company become India's most trusted brand by 2010.
"As we expand beyond traditional voice-based services to areas such as mobile commerce, ISO/IEC 27001 will play a critical role," says Jai Menon, director customer service and technology of Bharti Airtel. "Apart from securing digital data, we are also including physical data security as part of this initiative."
The organization began rolling out a comprehensive information security policy in 2003 and earned its first certification two years ago.
"We will need to sustain this initiative through continued compliance," Menon adds. "While it took tremendous involvement from the entire organization to achieve this feat, what makes it extra special is the sheer extent of its scope, which encompassed all the strategic business units of Bharti Airtel, comprising all the circles of mobile services and all the hubs of both, Telemedia Services and Enterprise Services."
The scope also includes all Data Centres, network zones, landing stations, switch locations and Airtel Centre.
To date, Bharti Airtel has been awarded 29 ISO/IEC 27001:2005 certificates by BSI. Based on the International Register of ISMS Certificates, this represents the largest number of ISO/IEC 27001:2005 certificates awarded to any single company in India across all sectors.
For more information on ISO/IEC 27001, visit http://www.bsigroup.com/en/Assessment-and-certification-services/management-systems/Standards-and-Schemes/ISO-IEC-27001/
Business Standards © 2010. Editorial produced by Caspian Publishing in association with The British Standards Institution. Editorial opinions expressed on are not necessarily those of BSI Group or Caspian Publishing. Neither Caspian Publishing nor BSI Group accept responsibility for advertising or editorial content, nor for that appearing on linked third-party websites. Reproduction in whole or in part is forbidden without written permission from BSI Group or Caspian Publishing.
Rising waters: revising PAS 1188
For those living in areas that are prone to flooding, having the right protection resources available is essential. While images of emergency sandbags holding back rivers of water may fill the media, there is a much wider range of products available for flood protection.
Airbus in the UK has achieved certification to BS 25999, the Business Continuity Management (BCM) standard, following an audit from BSI. The certification covers Airbus? wing manufacturing site in Broughton, North Wales and becomes the first aerospace manufacturing company to receive certification to this standard by BSI.
Integra ICT Hits environmental high
Integra ICT, the Bedfordshire-based telecoms provider, has achieved certification to ISO 14001 Environmental management from BSI.
Sapphire earns a standards hat-trick
Sapphire Energy Recovery, the waste processing and resource recovery business owned by Lafarge Cement, has achieved certification to three management systems standards (ISO 9001 Quality management, ISO 14001 Environmental management and BS OHSAS 18001 Health and safety management) from BSI. Sapphire is the UK's leading processor of used tyres, and sources and manages the logistics of a range of waste-derived fuels and raw materials for the cement industry.
How do you put a price on a brand? An international standard in the making will provide a consistent, reliable approach to brand valuation.
Question: What impact do you think BCM could have on business insurance in the future?
It is essential that any business suffering a disaster is able to continue as near normal trading in the shortest possible time period to survive. To achieve this, an organization should implement a comprehensive well-tested business continuity plan (BCP) as a first step. Insurance should be viewed as an extension to the BCP process, not an alternative.
Have a standards-related question for BSI or a comment on the website? We'll find the right person to answer.