More secure life
“I impose high demands. Which is why I can say that Combitech's consultants did an excellent job for us. That is also why they have earned our renewed confidence.”
Mikael Prinzell, security manager at insurance company AFA Insurance, commissioned Combitech to conduct a pre-study of information security at the company. The work will lead to the introduction of an information security management and control system, LIS , in accordance with ISO /IE C 27001.
The pre-study included a status analysis or temperature gauge which describes the flow of information within the company, everything from how people deal with information to how computer networks function and physical security. You could say that the analysis describes the security maturity of the company and how well documented procedures and processes around information management are.
Comprehensive work
The work has been extensive and included the mapping of relevant documentation and procedures, interviews with a large number of employees and managers and also a risk analysis with the customer's executive management.
“You can say that here at AFA Insurance we have good security but we could be better at documenting and structuring our procedures,” says Michael Prinzell.
“A lot of procedures are on the intranet and in different folders but far from all of them are established, accepted or even known throughout the organization.”
Directing the work
The next step in the process will therefore be for Combitech to lead the work involved in developing proposals for overall guidelines on eleven points with related instructions and to create a sound information management structure at AFA Insurance.
In the long run, work on the overall guidelines and instructions will be broken down into specific instructions, procedures and checklists.
“It might be anything from how we protect our premises to who has access to which data systems and which new systems to buy and how to do it,” says Prinzell. “Pretty obvious stuff, you might think, but in reality things are not always grounded in the right way or part of everyone's approach in a company.”
Competitive advantage
AFA Insurance and Combitech have, therefore, recently launched a long-term, extensive project. The entire project is expected to be finalized in 2012. Well-structured security procedures and processes are always a competitive advantage for a company.