FITIS Professional Chapter conducts awareness session on ISO27001:2022

The Federation of Information Technology Industry Sri Lanka (FITIS) Professional Chapter recently had its members evening event at Hotel Renuka, Colpetty. 

The theme of the event was “Planning and Implementing ISO27001: What are the main changes in 2022?”. ISO27001 is a standard for establishing, implementing, maintaining and continually improving an information security management system within the context of the organisation. 

This event was jointly sponsored by Bureau Veritas, a leading ISO certification body worldwide. There were approximately 50 participants from the industry, most of them were ISO27001 practitioners in their respective companies (mainly banks and Financial institutes). 

The key note speaker ContinuityNZ Managing Director and Principal Consultant Nalin Wijetilleke spoke on ISO27001:2022 as a pathway to manage cyber risk. This was followed by SLIIT Cybersecurity Researcher and Senior Lecturer Dr. Lakmal Rupasinghe who touched on the difference between the 2013 and 2022 version of ISO27001 and the practical examples of implementing the standard. 

Bureau Veritas Lead Auditor – System Certifications Mohammed Irshath spoke on Auditing and Certification angle of ISO27001:2022. This was followed by a panel discussion moderated by FITIS Board Member and ISACA Sri Lanka Chapter Vice President Lakmal Embuldeniya. 

Many questions from the audience were answered during the panel discussion along with additional content covered by the panellist. The event concluded with FITIS Board Member and ISACA Sri Lanka Chapter President Prashanthan Mahendiran distributing the tokens of appreciation to the speakers and delivering the vote of thanks.   

FITIS Professional chapter (ISACA Sri Lanka chapter) focuses on promoting and educating Information Security, Privacy, Governance and Audit in the country. It is part of a global network of more than 200 chapters worldwide. The chapter has been very active in the country and conducts monthly webinars and physical conference to its members and MoU partners, on these domain.