3rd Party Audit Confirms Certrec’s compliance with ISO Standard and demonstrates continued commitment to information security at every level
Fort Worth, TX (PRWEB) July 25, 2013 — Certrec Corporation, a leading licensing and regulatory compliance provider for NRC and NERC compliance announced today it has received ISO/IEC 27001:2005 certification.
ISO/IEC 27001:2005 – Information technology – Security techniques – Information security management systems – requirements (ISO/IEC 27001:2005), part of the growing ISO/IEC 27000 family of standards, is an information security management system (ISMS) standard published in October 2005 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). ISO 27001:2005 formally specifies a management system that is intended to bring information security under explicit management control.
The scope of the ISO/IEC 27001:2005 certification is limited to the information security management system (ISMS) supporting Certrec’s Website Development, Website Hosting, Network Infrastructure, Network Security, Engineering Consulting, Regulatory Compliance Solutions, Training, Information Management, Safety Culture Consulting, Document Management, and Information Research operations, and in accordance with the statement of applicability version 3 dated June 14, 2013.
“We take threats to the availability, integrity, and confidentiality of our clients’ information seriously,” says Ted Enos, President of Certrec, “We’re excited that Certrec’s information security management system has received third-party accreditation from the International Standards Organization.”
A recent report (“Electric Grid Vulnerability”) released by Congressmen Ed Markey (D-MA) and Henry Waxman (D-CA), May 21, 2013, found that the US electricity grid is under near constant attack from malware and cyber-criminals. The report found that many utilities were under “daily,” “frequent,” or “constant” attack each month, yet few implement only the barest minimum of security standards.
“In contrast, our clients are assured that our web-based tools and information storage solutions are certified to be protected by comprehensive information security controls, risk management practices, and the prevention of IT architecture security risks,” says Enos.
An independent, third party audit found Certrec to have technical controls in place and formalized IT Security policies and procedures. Certrec has implemented several physical security measures and countermeasures that protect it from unauthorized access or compromise and IT personnel were found to be conscientious and knowledgeable in best practices. This certification demonstrates Certrec’s continued commitment to information security at every level. Compliance with this internationally recognized standard confirms that Certrec’s security management program is comprehensive and follows leading practices. This certification provides more clarity and strength of Certrec’s security practices.
About Certrec:
Certrec is a leading provider of regulatory compliance solutions for the energy industry with the mission of helping ensure a stable, reliable, bulk electric supply. Since 1988, Certrec’s SaaS applications and consulting know-how have helped hundreds of power-generating facilities manage their regulatory compliance and reduce their risks.
Certrec’s engineers and business teams bring a cumulative 1,500 years of working experience in regulatory areas of compliance, engineering, and operations, including nuclear, fossil, solar, wind facilities, and other Registered Entities generation and transmission.
Certrec has helped more than 120 generating facilities establish and maintain NERC Compliance Programs. We manage the entire NERC compliance program for 60+ registered entities in the US and Canada that trust us to decrease their regulatory and reputational risk. Certrec is ISO/IEC 27001:2022 certified and has successfully completed annual SOC 2 Type 2 examinations.
For press and media inquiries, please contact marketing@certrec.com.
