New Solutions successfully completes first recertification for ISO/IEC 27001

Burghausen, 26th of February 2018 – New Solutions GmbH, a medium-sized provider of software solutions for the digitisation of business processes on the "shop floor", has had an effective information security management system (ISMS) in accordance with ISO/IEC 27001 since 2015 and has now successfully undergone recertification. This was confirmed by TÜV Rheinland at the end of January 2018 with the renewed issuance of the certificate. The certification refers to the implementation of software development projects as well as the standard software products Finito, Checkware and Synoset. 

"Information security is an ongoing process whose effectiveness needs to be regularly improved and reviewed. By recertifying our information security management, we are demonstrating that we and our customers can continuously protect ourselves and our customers against data loss and capital losses of any kind,"confirms Christian Grabmaier, the Information Security Officer (ISB) of New Solutions.

Annual surveillance audits / comprehensive recertification every three years
The international standard ISO/IEC 27001 is the standard for the implementation of an effective information security management (ISM) and the basis for the protection of confidential data. The development of information technology and digitalisation are constantly creating new technical, legal and normative requirements.

In addition to the annual monitoring audits, a comprehensive re-certification audit is carried out every three years, which was conducted at New Solutions in January 2018. In addition to many documents for the implementation of information security in the company, the auditor also subjected the infrastructure of the data center to a careful examination. Christian Grabmaier informed the auditor about the status quo of information security. Safety-relevant processes for the operation of all parts of the company were audited on a random basis.

ISM important for KRITIS companies
This proof of competence makes it easier for large corporations and the operators of critical infrastructures (KRITIS) to select the right service provider and software provider. Since the IT Security Act came into force in mid-2015, KRITIS operators have been faced with stricter requirements for network and information security. In addition, the new (EU) 2016/679 (Basic Data Protection Regulation) will enter into force in May 2018, which places even higher demands on data protection.

New Solutions therefore expects to gain further competitive advantages from the recognised and internationally comparable accreditation - especially with regard to industrial customers. Managing Director Christian Ehrenschwendtner comments:"The certification refers to the implementation of software development projects as well as our standard software products Finito, Checkware and Synoset. Competitors can often only present a certification of the data center service provider, we are also certified as a program provider."