CSE gets ISO certifications for information security, business continuity and IT service management

Wednesday, 26 March 2014 00:01 - - {{hitsCtrl.values.hits}}

The Colombo Stock Exchange has achieved three International Standard Organisation (ISO) certifications, and joined the elite band of stock exchanges in the world to define and certify themselves, based on auditable international standard for Information Security ( ISO 27001), Business Continuity (ISO 22301) covering Trading, Registry and Depository services, and IT Service Management (ISO 20000). The CSE is one of the few organisations in Sri Lanka that chose to certify its core business on ISO 27001 and ISO 22301 and IT services on ISO 20000. Through these ISO Certifications the CSE gives maximum assurance to stakeholders that their information is protected by the exchange in the most comprehensive manner. The certifications were issued in February 2014 after a rigorous assessment and validation process by TUV Nord, Germany. The certifications symbolise CSE’s commitment towards continuous improvement in securing sensitive information and business resilience to face unforeseen disasters. Since implementation of the project, CSE has improved its information security, business continuity and IT service management significantly. As the ISO certification process provides a detailed understanding of the entire organisation and its processes, opportunities for improvement have been identified and implemented. It has also helped to raise information security and business continuity awareness and readiness among employees of CSE and has led to the efficient management of risks related to these areas. CSE Chief Executive Officer Rajeeva Bandaranaike said that achieving three prestigious ISO certifications simultaneously is a confirmation of both the interest and commitment of CSE towards the efficient management of information security and business risks, continuous improvement of internal processes and technical competencies in order to secure data and information within the exchange. CSE Chief Information Officer Chandrakanth Jayasinghe stated that the CSE has initiated many technological infrastructure upgrades recently to improve resilience and uninterrupted delivery of IT services. Obtaining certifications in IT service management for IT services would strengthen the IT operations and enable the CSE to deliver improved services to stakeholders. He also stated that the CSE has established a dedicated information security function which indicates the commitment on the part of the exchange to strengthen information security within the CSE. He also thanked Ernst & Young Colombo for providing the necessary advisory services and handholding through the implementation process.