New Solutions successfully completes its first recertification for ISO / IEC 27001

Burghausen, 02/26/2018 – New Solutions GmbH, a medium-sized provider of software solutions for the digitization of business processes on the “shop floor”, has had an effective information security management system (ISMS) in accordance with ISO / IEC 27001 since 2015 and has now successfully undergone recertification . TÜV Rheinland confirmed this at the end of January 2018 with the renewed issue of the certificate. The certification relates to the implementation of software development projects as well as the standard software products Finito, Checkware and Synoset.

“Information security is an ongoing process, the effectiveness of which must be regularly improved and checked. With the recertification of our information security management, we prove that we can continuously protect ourselves and our customers from data loss and capital damage of any kind, “confirms Christian Grabmaier, Information Security Officer (ISB) at New Solutions.

Annual surveillance audits / comprehensive recertification every three years
The international norm ISO / IEC 27001 is the standard for the implementation of an effective information security management (ISM) and the basis for the protection of confidential data. The development of information technology and digitization are constantly creating new technical, legal and normative requirements.

In addition to the annual monitoring audits, a comprehensive audit for recertification takes place every three years, which was carried out at New Solutions in January 2018. In addition to many documents on the implementation of information security in the company, the auditor also carefully examined the data center infrastructure. Christian Grabmaier informed the auditor about the status quo of information security. Safety-relevant processes for the operation of all parts of the company were audited on a random basis.

ISM important for KRITIS operators
The proof of competence makes it easier for large corporations as well as the operators of critical infrastructures (KRITIS) to select the right service provider and software provider. Since the IT Security Act came into force in mid-2015, KRITIS operators have been faced with stricter requirements for network and information security. In addition, the new (EU) 2016/679 (General Data Protection Regulation) will come into force in May 2018, which once again makes significantly higher demands on data protection.

New Solutions therefore expects to gain further competitive advantages from the recognized and internationally comparable accreditation – especially when it comes to industrial customers. Managing director Christian Ehrenschwendtner says: “The certification relates to the implementation of software development projects as well as our standard software products Finito, Checkware and Synoset. Competitors can often only submit a certification of the data center service provider, we are also certified as a program provider. ”