CloudBlue
BLOG | FEB 21, 2020
Ingram Micro Cloud and CloudBlue are ISO/IEC 27001-Certified

Author

Darish Rajanayagam
Darish Rajanayagam

Category

Platform & product updates
SHARE

Digital security is on everyone’s mind and for good reason. Around the globe, great minds are at work designing security protocols to combat cybercrime. (Of course, cunning  minds are also at work trying to thwart those protocols.) Suffice it to say, the world can be a big scary place for data. 

But Ingram Micro Cloud and CloudBlue customers need not fear. We’re committed to remaining on the forefront of security advances. As proof, we’re now ISO/IEC 27001-certified. This certification is a significant milestone, demonstrating that Ingram Micro Cloud and CloudBlue meet the most stringent,  internationally recognized security standards. 

But what does certification really mean—and why does it matter? 

What is ISO/IEC 27001?

The International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) is an independent, international standards-setting body. Through its membership of multi-national standard bodies comprised of experts in various domains of cybersecurity, it develops consensus-based, market-relevant international standards. 

ISO/IEC 27001 is an international information security standard, adopted by the ISO/IEC and intended to bring information security under management control by establishing a framework for all policies, processes and technical controls related to security. The framework covers all aspects of the business, including legal, physical, technical and operational controls. 

Following the successful completion of an audit, organizations that meet the requirements may be certified by an accredited certification body. And we’ve done it.

ISO/IEC 27001 certification requires an organization to:

  • Systematically examine its information security risks, taking account of the threats, vulnerabilities and impacts
  • Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address any risks deemed unacceptable
  • Adopt an overarching management process to ensure information security controls continue to meet the organization's information security needs on an ongoing basis 

What does it mean for Ingram Micro Cloud and CloudBlue to become ISO 27001-certified?

Achieving compliance with ISO 27001 ensures Ingram Micro Cloud and CloudBlue have a comprehensive and mature security program in place that aligns with industry standards. This certification involved aligning our existing policies, processes and technical controls with the requirements set out by the standard, including:

  • Governance framework of policies and procedures 
  • Information security training and awareness programs
  • Control-implementation guidance in ownership and accountability processes
  • Prompt identification and mitigation of security risks
  • Continuous improvement strategies of the security posture

In short, it means we’ve proven we’re not only committed to security from the top down and inside out, but that we also have the controls in place to ensure our policies and practices are enforced. 

What does ISO 27001 certification mean to you as our customer?

Our ISO 27001 certification is evidence of our ongoing commitment to customer satisfaction by demonstrating the following core values: 

  • Security is a priority in everything we do, from new product development to day-to-day operations.
  • Operational excellence is our commitment in all areas, including software development, IT and information processes.
  • Exceptional results are our goal by having an organized process structure and defined strategy.
  • Continual improvement is how we operate, addressing evolving security threats by identifying vulnerabilities and mitigating risks.
  • Compliance with all privacy standards and requirements is an integral part of our business, including GDPR, CCPA and PCI.  
  • A proactive approach is how we operate, creating a secure framework for an enhanced customer experience.

We’re not stopping here

ISO 27001 certification attests to the maturity and sophistication of the Information Security program established for Ingram Micro Cloud and CloudBlue, but we’re taking it even further by using ISO 27001 certification as the foundation for achieving additional security certifications. For example, our ISO 27001 compliance efforts dovetail perfectly with our PCI DSS and Azure MSP Expert certifications:

Certification ISO 27001 Impact
PCI DSS Several security requirements overlap, and ISO 27001 certification improves these processes to ensure ongoing adherence for this important information security standard.
Azure MSP Expert ISO 27001 certification also improves our Azure MSP Expert certification process, simplifying the annual renewal of this gold-standard rating.

 

We’re proud and honored that you chose us to be your cloud partners, and we’ll continue to reach for the clouds in our internal security protocols—keeping your concerns foremost at all times.

See what’s new with CloudBlue
BLOG | DEC 3, 2020

The Ecosystem Advantage: Navigating a New Model for Exponential Growth

READ More
BLOG | NOV 24, 2020

Creating the Perfect Recipe for Digital Services

Let me be honest: the idea of using a cooking analogy for creating a winning …

READ More
Thumbnail [200x250]
BLOG | NOV 12, 2020

The Future of Telcos: Moving from Traditional to Thriving through Digital Transformation

It’s no secret that COVID-19 had a major impact on the technology industry …

READ More
Thumbnail [200x250]

CloudBlue, an Ingram Micro Business uses Cookies to improve the usability of our site. By continuing to use this site and/or log-in you are accepting the use of these cookies. For more information, visit our Privacy Policy.

I Accept