DNA achieves internationally respected information security certification – special recognition of the organisation’s work

ISO/IEC 27001 is and internationally respected and highly demanding standard. It sets requirements for information security management and associated systems and helps organisations systematically protect their data in all circumstances while ensuring legal requirements are met. 

“The expertise of our corporate business professionals in network, communication and cloud deliveries was given particular praise in the final report. Additionally, DNA’s identity management, access control and network capacity management, as well as the instructions and security documentation we produce for different user groups were also lauded”, says Patrick Gordin, VP, Professional and Value-Added Services at DNA.

According to Gordin, an extensive and demanding external audit such as this confirms that DNA has long been on the right track when it comes to information security and that these aspects have been baked into the company’s day-to-day operations through continuous and systematic development work.

“The certification is proof of work well done from an independent party and is highly valued by our customers. Earning it also testifies to the fact that we have had a systematic and structured process for managing IT risks and identifying possible information security vulnerabilities in place for a long time.”

Added protection for customers – certification is renewed annually 

With cyber-attacks and data security incidents on the rise, organisations are utilising an increasing amount of their own and their partners’ resources to mitigate risks. From a customer’s perspective, an internationally recognised certification renewed annually through audits that confirm stringent information security measures remain in place makes DNA a safer partner.

“Certified organisations commit to systematically observing the required procedures in everything they do. This strengthens their ability to identify threats, attacks and vulnerabilities and prevent data breaches”, Gordin explains.     

DNA has also received praise from customers for affirming its information security with ISO 27001 certification.  

“This is a widely recognised certification in the industry, and our customers have expressed their appreciation for our success in earning it. The certification proves to customers that their ICT solutions are secure, that we handle their data in accordance with information security guidelines and that we are committed to the continuous development of information security within our organisation. Together with other acknowledgements, this certification cements DNA as one of the leading suppliers of information security solutions in Finland and the Nordics”, Gordin says.

The audit was conducted through a review of the company’s processes and interviews of its personnel. In addition, the audit also involved a review of information security documentation and IT systems, as well as an on-site inspection aimed at ensuring information security and data protection practices were implemented at the organisation’s offices.

Media enquiries:

Patrick Gordin, VP, Professional and Value-Added Services, tel. +358 50 475 5556, patrick.gordin@dna.fi 

DNA Corporate Communications, tel. +358 44 044 8000, communications@dna.fi