29 Aug 2024

With cybercrime rising and new cybersecurity legislation tabled by the UK government, BM TRADA is encouraging businesses to achieve ISO 27001 certification sooner rather than later to safeguard information security and avoid non-compliance.

Cybercrime has risen significantly in recent years, with 32% of businesses in the UK now attacked at least once a week, according to statistics gathered by The Independent. Phishing and ransomware attacks have had a particularly disruptive impact, with 61% of businesses in the UK reporting staff having received fraudulent emails or accessed fraudulent websites.

Effects of a cyber breach 

The long-term effects of a cyber breach on businesses and the economy have led to the UK Government to recently announce the Cyber Security and Resilience Bill, aimed to strengthen the UK’s cyber defences. Amongst other intentions, the Bill is set to expand the remit of the existing regulation, put regulators on a stronger footing, and increase reporting requirements to build a better picture of cyber threats in government.

BM TRADA launched a white paper on ISO 27001 Information Security Management Systems certification

Following the announcements, BM TRADA, part of the Element Materials Technology group, has launched a white paper on ISO 27001 Information Security Management Systems certification. The paper from the pioneering management systems certification provider introduces the internationally recognised ISO 27001 standard, what the certification process entails, and the benefits of achieving the certification.

Information security 

Lee Horlock, Head of Technical & Approvals – Management Systems at BM TRADA, said: “In today’s technologically evolving world, information is now one of the most valuable assets for any organisation. Protecting this information is critical, not just from an ethical point of view but also to comply with regulations such as GDPR and the UK Data Protection Act 2018."

We urge all businesses and those in control of information security to become ISO 27001 certified, if they are not already. Doing so offers a number of benefits, from being able to outwardly project trust and confidence in your information security, reducing the risk of financial and reputational loss, to being able to demonstrate compliance, which is now often also needed for business tenders.”

BM TRADA’s white paper

Within BM TRADA’s white paper, readers will find a case study on how the certification provider helped NHS Greater Manchester Integrated Care achieve ISO 27001 standard, not long prior to the outbreak of the COVID-19 pandemic. Pioneering the project was Phil Scott, IT Security Manager for NHS Greater Manchester Shared Services, who had the following to say:

We knew ISO 27001 certification would make us pioneers in our field, but we didn’t realise what a difference it would make as we faced a global pandemic. Our staff and customers could work from home quickly and easily, while other parts of the healthcare system were struggling months later. Feedback from customers was overwhelmingly positive, boosting team morale at an incredibly difficult time.”