en:infoturbe_pohimotted
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
en:infoturbe_pohimotted [2022/02/07 16:44] toomas created |
en:infoturbe_pohimotted [2022/03/25 12:09] (current) toomas [3.1. Information security policy, process, organisation and risk management] |
||
|---|---|---|---|
| Line 25: | Line 25: | ||
| {{:mustand:toomas:27001-eng-directo.jpeg?200|}} | {{:mustand:toomas:27001-eng-directo.jpeg?200|}} | ||
| + | |||
| + | How Directo's control objectives apply The requirements of the current version of the standard ISO / IEC 27001: 2013 can be found in: [[en:soa|Statement of Applicability (SoA) ]] | ||
| Our company is conducting ongoing and systematic monitoring of information security risks and updating the risk assessment, together with activities to reduce the residual risks related to information security. | Our company is conducting ongoing and systematic monitoring of information security risks and updating the risk assessment, together with activities to reduce the residual risks related to information security. | ||
| Line 55: | Line 57: | ||
| The servers used to provide Directo’s Service are physically located in a secure data centre in the territory of European Union. | The servers used to provide Directo’s Service are physically located in a secure data centre in the territory of European Union. | ||
| - | Directo OÜ only works with recognised partners to host infrastructure. The data centre service is provided by Telia Eesti AS, whose information security management system has been certified by Bureau Veritas to comply with the ISO/IEC 27001:2013 standard: https://www.telia.ee/images/documents/sertifikaadid/iso_iec_27001_2013_est.pdf. | + | Directo OÜ only works with recognised partners to host infrastructure. The data centre service is provided by Telia Eesti AS, whose information security management system has been certified by Bureau Veritas to comply with the ISO/IEC 27001:2013 standard: |
| + | * [[https://www.telia.ee/images/documents/sertifikaadid/iso_iec_27001_2013_est.pdf |ISO/IEC 27001:2013 certificate 20.02.2019 - 25.02.2022]] | ||
| + | * [[https://www.telia.ee/images/documents/sertifikaadid/DNV_Telia_Eesti_ISO27001_2021_(DC_and_B2B_ICT_management)_eng.pdf| ISO/IEC 27001:2013 certificate 26.02.2022 – 25.02.2025]] | ||
| ====3.6. Data communication==== | ====3.6. Data communication==== | ||
