RM recommended for information security certification

The Hindu, 20 July 2006

'First co. in the State to be recommended for ISO 27001:2005'

THIRUVANANTHAPURAM: RM Education Solutions India (RM ESI), the offshore development centre of RM plc, U.K., has been recommended for certification against ISO 27001:2005, the International Standard which enfolds the requirements for an Information Security Management System (ISMS).

One of the top IT companies in the Technopark here, RM ESI underwent an audit conducted by Intertek, an international certification organisation providing professional management systems certification services, on behalf of RvA of the Netherlands, the accreditation body. This was an upgrade from the BS 7799-2:2002 certification achieved by the company in June 2005. It was achieved as a result of the total commitment to the company's information security programme shown by all management and staff. RM ESI said that it was the first company in Kerala to be recommended for ISO 27001:2005 certification.

ISO 27001:2005 standard provides a comprehensive set of controls comprising the best practices in information security. It helps identify, manage and minimise the range of threats to which company information is regularly subjected. An Information Security Management System (ISMS) is a systematic approach to managing sensitive company information so that it remains secure. It encompasses people, processes and IT systems. During the certification process, Intertek verified RM ESI's compliance with the security standard which includes compliance with legal requirements. The scope of certification of RM ESI is the Information Security Management System covering all information assets deployed for development of software and providing business process services. The audit determined the conformity and effectiveness of RMESI's ISMS, which met the ISO 27001:2005 standards.

Connell Viegas, CEO of RM ESI said, "We are pleased to have been recommended for ISO 27001 certification. This certification reinforces RM ESI's maturity and commitment to safeguarding the confidentiality and integrity of RM's information.

"The certification was the outcome of a three month long effort involving a comprehensive risk assessment, formulation of policies and procedures and an extensive training programme for all staff. A robust information security management system is essential in the present electronic era where confidentiality, integrity, and availability of information have become crucial," Mr Viegas said.

Anand Balakrishnan, RM ESI's CTO, who is also the Chief Information Security Officer, added: `This is a testimony to our commitment to information security of assets and continual improvement in our process goals.’

The Hindu, 20 July 2006

RM recommended for ISO

The Hindu Business Line, 17 July 2006

RM Education Solutions India (RM ESI), the offshore development centre of the UK-based RM Plc, has been recommended for ISO 27001:2005 certification. The certification is an upgrade from the BS 7799-2:2002 certification the company received in June 2005.

The ISO 27001:2005 standard provides a comprehensive set of controls comprising the best practices in information security, says a press release issued by RM ESI. It helps to identify, manage and minimise the range of threats to which company information is regularly subjected. The standard deals with the requirements for an Information Security Management System, which is a systematic approach to managing sensitive company information so that it remains secure. It encompasses people, processes and IT systems, the release adds.

The Hindu Business Line, 17 July 2006