|
DOHA BANK ACHIEVES ISO/IEC 27001:2005 CERTIFICATION, FIRST IN QATAR FOR ALL BANKING OPERATIONS.
Doha Bank, a prime and progressive bank in Qatar has demonstrated its high level of competence in information security management by being awarded with the ISO/IEC 27001:2005 Information Security Management System certification for all Information and Information processing assets of Doha Bank located in the state of Qatar for conducting Banking business. The assessment was performed by STQC (Standardization Testing Quality Certification), Ministry of communication and Information Technology, Government of India.
The internationally recognized British Standard, BS 7799-2:2002 has been updated and adopted as an international standard, ISO/IEC 27001:2005. Commenting on this milestone achievement, Mr. R. Seetharaman - Chief Executive Office of Doha Bank said 'ISO27001 is of vital benefits to our customers who can assure that their financial information and transactions are being handled by professionals who are very mindful of the need for information security and rightly want their bank to not only do the right thing but to be independently audited and certified. The ISO/IEC 27001:2005 accreditation is only awarded to companies who can prove high levels of competency in information security management. This is a strong endorsement of our commitment to taking a proactive stance against security threats and breaches, a position Doha Bank will continue to pursue'.
Mr. U V Krishna Kumar, Head of Information Technology adds, 'Being a financial institution, information security has always remained at the top of IT agenda and it has been our endeavour to use the best of security infrastructure and monitoring tools supported by industry standard controls and processes to provide a reliable and safe environment for organisation's information assets. The certification is a testimony to our commitment to provide our customers a truly safe banking environment protected from all kinds of security threats and breaches.'
Mr. Khalid Latif, Executive Manager, Risk Management expressed his satisfaction for this achievement and stated the bank information security policy statement as 'Doha bank belongs to the shareholders, customers, society, management and staff. Each one of us has a responsibility and is committed to protect information assets of the bank at all the times to enhance trust, reliability and confidence in bank's future. Accordingly the information security management program shall, any time, remain effective and suitable to business strategy, legal & regulatory requirements and stake holder. Specific information security objectives shall be set periodically and results monitored against them.'
About ISO/IEC 27001
ISO/IEC 27001 is a standard setting out the requirements for an information security management system (ISMS), the certificate, outlines the rules for defining, establishing, implementing, operating, reviewing, monitoring, maintaining and improving a documented Information Security Management System within the context of an organization's overall business risks. The standard is designed to ensure the selection of adequate and proportionate security controls that protect information assets and give confidence to interested parties including an organization's customers.
|
|