Information security is vital to Altenar, and the company is proud to have had our ISO 27001 certificate renewed following a recent audit.
We spoke with Denise Vella, Director of Information Security at Altenar, to learn more about the process and its significance for the company and our operating partners.
What does it mean for Altenar to have received our renewed certificate?
Altenar was initially awarded ISO 27001 certification in April 2022. We have now successfully completed the second and final surveillance audit ahead of our recertification under the new ISO 27001:2022 version.
This reaffirms our commitment to maintaining a strong Information Security Management System in line with international standards, and reflects our ongoing efforts to strengthen information security and drive continuous improvement. It also highlights Altenar’s dedication to protecting sensitive information and effectively managing security risks.
For Altenar, holding ISO certification provides the added benefit of demonstrating compliance with regulatory requirements related to information security and facilitates certification across the various jurisdictions in which we operate.
How often is the certificate renewed?
ISO 27001 certification is valid for a three-year cycle. To maintain certification, the company must undergo annual audits to ensure continued compliance.
How rigorous is the audit?
The ISO 27001 audit is typically quite rigorous, involving a comprehensive review of policies, procedures, controls, risk management processes, and records. Auditors examine each component in depth to ensure full compliance with the applicable requirements of the standard.
In addition, key personnel within the organization are interviewed to assess their knowledge and understanding of the company’s information security practices. The audit also evaluates risk management processes to confirm that risks are properly identified, assessed, and addressed through appropriate controls.
What are the biggest challenges in passing the audit?
One of the biggest challenges in passing the audit is building a strong culture of security awareness and compliance across all levels of the organization, along with consistent leadership support. Fortunately, Altenar maintains a solid security posture, with employees actively participating in required training and following relevant policies to create a cooperative, security-conscious environment.
How important is it that everyone in the company is aware of cybersecurity?
Humans are often the weakest link in the cybersecurity chain. Phishing and social engineering attacks continue to increase, aiming to manipulate individuals into revealing sensitive information, clicking on malicious links, or downloading malware.
It is therefore critical that everyone understands cybersecurity risks, company policies and procedures, and their individual responsibilities to stay compliant. This knowledge is essential not only for maintaining certifications, but also for protecting data and preventing security incidents.
A cybersecurity breach can seriously damage a company’s reputation and erode trust with customers and stakeholders. By ensuring that all employees are informed and vigilant, the company demonstrates its commitment to protecting sensitive information and building long-term trust.
How important is the certificate in terms of highlighting our security policies to our clients and partners?
Achieving certification demonstrates Altenar's ongoing commitment to implementing and maintaining robust security policies and procedures. It serves as external validation of our security practices and risk management processes, strengthening our credibility with clients and partners.
It reassures clients and partners that their data and sensitive information will be handled with care and protected according to internationally recognized standards—while also offering a competitive advantage in the market.
You can verify the validity of our ISO certificate by entering our certificate number 239970 via this link: www.british-assessment.co.uk/verify.
