Infinitum completed security audit of IT systems

On December 2, 2013 the specialized depositary of "INFINITUM" and I-Teco company reported: reduction of a management system for IT services in compliance with requirements of the international standard ISO/IEC 20000:1-2011 is complete.

Project Tasks

In October, 2013 the British Standards Institute (British Standards Institution, BSI) booked audit of a management system for IT services in Infinitum. According to the results of audit to Infinitum received the certificate of conformity of ITMS 601539.

"Certification of SUIS at us took place not for the first time: a few years ago the similar procedure successfully came to the end for the quality management system (QMS) in ISO 9001:2008 when the company took of practice, already rather widespread in Russia, advantage. In 2012 the British Standards Institute issued the certificate of conformity of the information security management system (ISMS) to requirements of ISO/MEC 27001:2005 that became an unprecedented event for Russia and the CIS countries, – Sergey Kiselyov, the head of department of IT of JSC Specialized Depositary INFINITUM told. – Implementation and certification of SUIS on compliance to requirements of the ISO/IEC 20000:1-2011 standard will allow us to increase transparency and controllability of processes of providing IT services, positively affecting quality and efficiency of customer service. We are not going to be satisfied with what has already been achieved and we will continue development of this solution, being guided by the best world practices and its integration into the system of management".

"This project is interesting that Infinitum is one of the first organizations which prepared a management system for IT services for certification on compliance of the new version of the standard of 2011 and with the first attempt successfully it completed", – Valery Girko, the leading auditor of SUIS of BSI company emphasized.

Project Progress

The project on implementation of requirements of ISO/IEC 20000:1 executed with the assistance of consultants of I-Teco proceeded within ten months. Its feature - existence in Infinitum of earlier unrolled and fully functioning systems of quality management and information security: SMK includes a part of processes of SUIS, and SUIB completely corresponds to ISO/IEC 20000:1 regarding ensuring data protection.