Information Security Management Application Implementation

Summary

A European IT and R&D services company faced strong security requirements from its clients and needed to develop a full-scale Information Security Management System (ISMS) from scratch — security policies, controls, employee training, and a complex ISO 27001 certification audit. INNERLUXES's information security expert joined the customer's internal team, helped implement all required controls, and the ISMS was successfully certified.

About the Customer

The Customer is a large IT and R&D services company in Europe that provides design and development services for embedded systems, products, and components to customers worldwide. Its focus areas include telecommunications for mobile, access, and switching applications; automotive solutions for infotainment, safety, and comfort; and dedicated areas in the automation and medical industries.

The Challenge

The Customer had strong security requirements from its clients' side. It needed to develop, from scratch, a full-scale Information Security Management System — including the development of security policies, the implementation of security measures and controls, training employees, and passing a complex ISO 27001 certification audit.

The Solution

The Customer organized an internal ISMS implementation team and involved an external INNERLUXES information security expert. Under the guidance of the information security leader, the team implemented all required controls in accordance with ISO 27001 requirements. The implemented ISMS was successfully certified by an international certification body.

In addition, a solid automated security framework was developed, which was later offered to clients as a separate product.

The Results

• INNERLUXES, in cooperation with the Customer's security team, built and implemented an Information Security Management System in accordance with ISO 27001.
• The ISMS ensures a comprehensive approach to information security in terms of confidentiality, integrity, and availability.
• It also allows the Customer to stand out from competitors.

Technologies and Tools

SharePoint Online, SharePoint Framework (SPFx), Microsoft Power Automate, Microsoft Power Apps, Microsoft Forms.