Information security

What is ISO 27001?

ISO 27001 is the international standard for information security. The standard was originally published in 2005, revised in 2013, and again most recently in 2022. ISO 27001 describes the requirements for setting up, implementing, maintaining, and continuously improving an Information Security Management System (ISMS). As per ISO 27001, the main goal of an ISMS is to protect three aspects of information:

• Confidentiality: Only authorized persons have the right to access information.
• Integrity: Only authorized persons can change the information.
• Availability: The information must be accessible to authorized persons whenever it is needed.

What does our certification mean in practice?

At PRé, we are committed to keeping your information secure. We have implemented processes to ensure that we maintain a constant focus on information security. Our dedicated process owners for ISO27001 controls, IT & Security Project Manager and management team work together to ensure that every aspect of information security is covered.

To help you feel confident that your information is safe with us, we ensure that everyone in our team is trained in information security and privacy, including GDPR. We conduct annual internal and external audits and perform relevant background checks for personnel handling sensitive information.

In addition to our standard procedures, we have a crisis team that developed a formal Business Continuity Plan, an Incident Response Plan, and a Change Management Process. We periodically test our tools to ensure data availability, integrity, and confidentiality, so you can be assured that your information is safe with us.