JEDDAH — Yusuf bin Ahmed Kanoo Group (YBA Kanoo), one of largest multinational family businesses in the region has achieved the International Organization for Standardization (ISO) certification for information security management systems (ISMS) known as ISO/IEC 27001:2013. The certification which is a systematic approach to managing company information so that it remains secure was given to the Group’s offices in the Kingdom of Bahrain and the Kingdom of Saudi Arabia.

“Information is a critical asset for any organization, which needs to be protected with the highest standards. By achieving ISMS compliance, we continue the trust we have with our clients and partners for over 130 years,” Ahmed Fawzi Kanoo, YBA Kanoo Director, said.

“Being ISMS compliant demonstrates YBA Kanoo’s commitment towards improving its information security program on a regular basis.” Anas Kamaluddin, Head of YBA Kanoo’s Information Technology (IT) Department, said. “By establishing and maintaining a documented system of controls and management, risks can be identified and reduced.”

The information security management system which YBA Kanoo now applies will help in protecting customer and internal information from getting into unauthorized hands. It will also protect the integrity and accuracy of the information which can only be modified by authorized users. The benefits of ISO27001 certification also include improved customer and business partner confidence, increased business resilience and alignment with customer requirements. The ultimate goal is to minimize the risk of business disruption and costs associated with any security breach.

The ISO for information security management systems is known as ISO/IEC 27001:2013. ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. — SG