4PS Group obtains ISO 27001 certification

As a cloud software provider for the construction industry, we make data security a priority. Our customers are supported with software based on the secure Microsoft Dynamics 365 Business Central platform.  As Microsoft invests billions in cybersecurity and their Microsoft Azure data centres are ISO 27001/27002 certified, customers know their data is safe in the Azure Cloud.

Data security also a priority within 4PS Group

Similarly, our employees also handle privacy-sensitive data of both customers and colleagues. To emphasise that 4PS Group treats this data in a safe and responsible manner, we decided to obtain the ISO 27001 certification. This certification ensures we stay sharp and stimulates us to keep fulfilling the strict ISO 27001 standard.

What is the ISO 27001 standard?

ISO 27001 is an important international standard for information security. This standard prescribes how companies handle information security process-wise. It ensures the confidentiality, availability and integrity of information within the organisation.

Setting up an ISMS

Central to the certification process is setting up an Information Security Management System (ISMS). An ISMS is not a stand-alone system, but it refers to a certain way of working. An ISMS ensures that you continuously manage (confidential) information according to a standardised way to ensure the security of this data.

At 4PS Group, we use SharePoint to shape this ISMS. At one central location, we collect all documents surrounding our information security policy. This system is accessible to all 4PS Group employees and includes the information security policy, risk analysis, audit results and our continuous improvement plan.

Starting with a good basis

Wondering how we approached this process at 4PS? We asked Esther Koenders, project manager at 4PS, to take us through this intensive but insightful process.

“About a year ago, we decided to start the certification process. We did so primarily to ensure that we handle all privacy-sensitive data correctly in our processes. Also, we noticed that more and more customers had questions about ISO 27001,” begins Esther.

“We set up a project team with colleagues from various departments and with different expertise. It was often a challenge to combine the ISO project with our other work. Nevertheless, the process was very valuable for us because it provided us with insight into all possible risks. We noticed along the way that we had actually already got a lot of things right, which was very reassuring,” laughs Esther.

Everyone on board

“Because we did not yet have an ISMS, we had to put a lot of things in writing. That took some getting used to, but it was great to see that all colleagues were fully on board with the importance of this project. Everyone did their best to contribute,” emphasises Esther. “Because we kept the organisation well-informed about the importance and progress of the project via updates on SharePoint, there was no reluctance to work differently. Everyone clearly understood that this was an opportunity to optimise our processes. It is thanks to this positive attitude and the commitment of all colleagues, in particular our Information Security Officer Har Greijn, that we now have our ISO 27001 certificate in our hands,” concludes Esther.

Continued commitment to optimal data security

We are happy with our ISO 27001 certificate, but it is important to emphasise our continued commitment to optimising data and information security.  That way, our customers, partners and colleagues know that their data is always in safe hands.

Would you like to know more about our ISO 27001 certification? Then contact your 4PS Account Manager. Are you not yet using our secure cloud software but would like to know more? Then download our 4PS Construct brochure!