• OMNINET is certified for the most important international ISMS standard
• Adherence and protection of information security and best possible compliance
• Precise implementation with special auditing software

The security of customer information and quality assurance are of particular importance at OMNINET. The certification center of TÜV Rheinland certifies that OMNINET Holding GmbH has implemented an information security management system (ISMS) and applies it in compliance with the standard. Thus, in addition to ISO 9001, which has been in place for years for proven quality management, OMNINET is now also certified for information security according to ISO 27001. “OMNINET’s ISMS certification leads to a strengthened market position of the company over competitors, strengthens customer confidence in our capabilities and increases OMNINET’s resilience to cyber threats,” says Markus Lenzer, Managing Director of OMNINET Software-, System- und Projektmanagementtechnik GmbH.

OMNINET is certified for the most important international ISMS standard

ISO 27001 certification is the most important national and international standard in information security management and a globally recognized standard. For successful certification, all processes relevant to information security must be regulated; starting with the classification of information and an inventory of these information assets through to supporting systems (asset management). In addition, successful implementation and use of an information security risk management must be ensured, as well as the definition of how information security incidents are to be handled. Special attention is paid to the preparation of training materials and the awareness of all personnel. The definition, planning, implementation and support of management processes also play an essential role. Additional focus is on the creation of and compliance with an emergency plan in the event of information security incidents affecting OMNINET’s operations.

Adherence and protection of information security and best possible compliance

With the help of a transparent overview of all information worth protecting, while at the same time reducing risk—by systematically uncovering and eliminating vulnerabilities in the handling of data and information—confidentiality and availability are increased and the integrity of information is ensured. This structured approach to dealing with information enables OMNINET to turn risks into opportunities and potential. In this way, particularly security-sensitive companies can rely on a strengthened partner, since assets requiring protection from all areas, such as personal data or information on business relationships, are demonstrably specially protected. This minimizes the risk for all customers, which makes delays in projects less likely, for example, and has a direct impact on the availability of OMNINET services.

Precise implementation with special auditing software

The intended certification was planned and implemented in a very short time. The audit and compliance management tool used played a significant role in the success. The in-house software developed for audit implementations is particularly impressive due to the structured preparation of the integrated ISMS approach by means of asset management and integrated risk management. This way, all relevant data and processes could be handled in a clear and transparent manner and then be clustered. This demonstrates—in addition to the certification itself—the enormous potential of the GRC Center as an all-in-one solution. With this software, companies can safely comply with numerous other legal or internal regulations in addition to conducting audits. Particularly noteworthy, in addition to the intuitive asset management and risk management, is the multistandard capability, which makes it possible to simply import all specifications into the application and thus map every requirement.