What is the ISMS and why is it important?

To protect our business information from unauthorised access, disclosure, modification or destruction, VanRoey has established a Information Security Management System (ISMS) set up.

This framework lets us assess risks, respond with appropriate measures and continuously improve. The ISMS also ensures we comply with the strict ISO 27001 standards. The result? More trust among employees, customers, suppliers and partners, because they know their data is safe with us.

The three core values of ISO/IEC 27001: 2022

ISO 27001 revolves around three crucial pillars:

• Confidentiality: Only authorised persons are given access to sensitive information.
• Integrity: Data must remain accurate and complete, without unwanted changes.
• Availability: Information is accessible to those who need it, at the right time.

Our recent certification confirms our commitment to these three values. From using strong passwords and MFA, to quickly reporting suspicious e-mails: small actions make a big difference. If colleagues have questions or come across a possible security incident, they contact the ISMS Team immediately. They are there to support them and mitigate any risks.

Role of employees is indispensable

Successful information security stands or falls with the cooperation of everyone within VanRoey. Employees are continuously made aware of security guidelines in both official channels and playful ways.

They report incidents and, when in doubt, consult the documentation on our Governance site, built in SharePoint. We also count on them to guarantee and monitor clean-desk and clean-screen policies. Sinners who forget to lock their PC or leave sensitive documents behind will have a clear conscience when they find a disk on their desk. Posters were also put up in numerous places in the working environment to keep colleagues permanently informed.

Inge Van Beers, Security Officer and Business Process Manager at VanRoey, together with some colleagues, pulled the track: "The involvement of all colleagues helps us to ensure the continuity and security of our systems and data. Only together will we ensure that our ISMS remains future-proof and that we continue to proudly carry our ISO 27001 certification and can renew it in 2028!”

Iso 27001 certified: an ongoing process

“For an IT company like VanRoey, known in particular for its cybersecurity specialities, information security is extremely important. That is why we make extra efforts to guard the data of our customers, suppliers and relations, as well as our own internal data. So those extra efforts are now rewarded with the ISO/IEC 27001: 2022 certificate. This is not a one-off action, but a permanent way of working.

As a Managed Services & Security Provider, we put all the knowledge we have built up around information security to work for our customers on their information security.”

• The certificate: here (pdf) + More info on what this certificate means can be found here
• Declaration of applicability: NL | EN