Blog

EBF achieves ISO 27001 certification – and thus proof of high IT security

In the second quarter of 2019, EBF GmbH successfully completed the audit for the ISO 27001 certification. The certification is proof that the EBF invests sufficiently in information and IT security and protects confidential data – including that of customers and partners – sufficiently against misuse, attacks, loss and disclosure and stores it securely. On the way to certification, EBF has further optimized its internal infrastructure and processes and minimized risks. For business partners and customers this is an enormous added value.

What is ISO 27001?

ISO 27001 is an international standard for information security and documented proof that a certified company guarantees systematic and structured information security. The basic prerequisite is the introduction of an Information Security Management System that meets certain requirements and must be continuously optimized. This helps to ensure that sensitive data is reliably protected, that IT systems are highly available, and that the company identifies risks at an early stage and prepares itself adequately for them.

Highest priority for ISO 27001 throughout the company

EBF has been working at full speed on certification in recent months and has optimized many processes and structures along the way. Risks are clearly identified, and the best possible preparations have been made. For example, the company can take immediate action in the event of a hacker attack and ensure data security.

"The ISO certification was an important concern for us. We deal with highly sensitive data on a daily basis and their protection is our top priority. That's why we invested in optimizing our processes and positioned ourselves well in terms of information security."

Markus Adolph, Gründer und geschäftsführender Gesellschaft der EBF

"Such certification involves a great deal of effort and ties up both personnel and financial resources. A high level of management commitment is therefore just as important as a dedicated team that implements the standards throughout the company. Both were given the EBF. This is what distinguishes the EBF from many other companies."

Klaus Foitzick, Vorstand der activeMind AG, einem Beratungsunternehmen für Datenschutz und Informationssicherheit, welches die EBF bei der Zertifizierung unterstützt hat

Clear evidence of a high standard in information security

The EBF audit was carried out by TÜV Rheinland and concluded with an extraordinarily good result. EBF has fulfilled the requirements of ISO 27001 and already demonstrated a high degree of maturity in terms of information and IT security in the first audit. The audit has clearly shown that information security is anchored and lived throughout the company. EBF is thus setting a clear sign for the security of information, data and systems.

The topic of information security is becoming increasingly important for customers due to many data scandals and increasing security risks, confirms Marco Föllmer, also Founder and Managing Director of EBF:

"Our customers' expectations of safety standards are rightly rising all the time. This is an important criterion in the selection of suppliers and partners and in some cases, companies even require ISO 27001 certification for cooperation.”

Marco Föllmer, ebenfalls Gründer und geschäftsführender Gesellschafter der EBF

With the ISO 27001 certificate, customers now have documented proof that they can rely on a high level of IT security at EBF. A clear advantage over the competition.

A continuous process

The one-off certification is not enough: The company must carry out continuous self-monitoring in order to be able to react to changes at an early stage and optimize processes and structures regarding information security. In an annual audit, the actual state is then checked and only if it is passed, the certificate retains its validity.

Would you like to learn more about ISO certification and our IT security?