ISO/IEC 27001:2017 recertification audit supports new development architecture

Wiesbaden, November 2021: Futura Solutions has been successfully recertified by TÜV Saarland for ISO/IEC 27001:2017 for the third time. The Information Security Management System (ISMS) and new approaches of the IT organization, which Futura Solutions has specifically promoted in 2021, were put to the test. With the deeper integration between software development and IT operations and a new development architecture, monitoring, measurement and analysis of information security processes has become more relevant than ever.

The annual audits for ISO/IEC 27001 certification have the task of monitoring further developments around the core of the information security management system (ISMS). New technological and process requirements resulting from the DevOps approach have a major influence. This refers to the merging of development and operational processes, practices and responsibilities into a single DevOps software development approach.

Migration to Microsoft Azure

Of central importance here is the monitoring and control of IT service providers and Microsoft Azure, a scalable and customizable cloud computing platform via which ^FUTURA® is technically operated.  

"We completed the migration of the application to Microsoft Azure this year. We can now change IT processes more flexibly and, in terms of development, we can respond more quickly to the changing opportunities in the IT environment," says Markus Frank, Head of IT Infrastructure Cloud.

The consistency between the defined measures, the declaration of applicability and the results of the risk assessment and risk treatment process as well as the information security policy and objectives could be demonstrated in the recertification audit without any discrepancies.

Consultants from DEUDAT GmbH, as external data protection officers and Information Security Officers (ISO) for Futura Solutions, also accompany the regular external and internal audits. The initial certification took place in 2015. The second surveillance audit will take place in one year; the next recertification is scheduled for 2023.