The First Insurance Company in Thailand awarded
the Information Security Management System: (ISMS) ISO/IEC 27001:2005 Certificate
 |
|
What is ISO/IEC 27001:2005 (Information Security
Management System: ISMS) ISO/IEC 27001 is the only auditable international standard which defines the requirements for an Information Security Management System (ISMS). The standard is designed to ensure the selection of adequate and proportionate security controls.
This helps CIGNA to protect the information assets and gives confidence to our business partners and their customers that their data is safe with us. The standard adopts a process approach for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving your ISMS.
|
CIGNA holds certificate no. IS 543214 which complies with the information security management system for protection of customer data in telemarketing process and the related information systems operation and infrastructure support activities.
Within the context of ISO 270001 standard, Information security will ensure utmost
- Confidentiality : ensuring that information is accessible only to those authorized to have access
- Integrity : safeguarding the accuracy and completeness of informationand processing methods
- Availability : ensuring that only authorized users have access to information and associated asset when required
Benefits ISO/IEC 27001 can bring the following benefits to the organization:
- Demonstrates the independent assurance of the internal controls and meets corporate governance and business continuity requirements.
- Independently demonstrates that applicable laws and regulations are observed.
- Provides a competitive edge by meeting contractual requirements and demonstrating to our business partners that the security of their information is paramount.