Databarracks Achieves ISO 27001 and 9001 Certification

Cloud hosting and IT DR provider, Databarracks
Ltd, has achieved both ISO 27001 and ISO 9001
certification across the entire business.

The company, which protects the data of companies in the UK and around the
world, has implemented the standards in order to
further improve information security and customer service.

ISO 27001 is an international standard which defines the requirements for an
Information Security Management System (ISMS). It means that Databarracks has
demonstrated it has the procedures in place to protect and safeguard the
confidentiality, integrity, and availability of any information it holds or
processes, both internally and on behalf of its clients.


The ISO frameworks require inspection
and risk analysis of all
company processes:
"I’d compare it to a comprehensive
service for the business – like an aeroplane being completely dismantled,
checked and rebuilt," reveals Peter Groucutt, MD at
Databarracks.

"Security has always been our
watchword at Databarracks and, as our name suggests, it is something we take
extremely seriously," continues Groucutt. "ISO27001 has given us a security-based framework around which to
identify, measure and control the risks within what is an extremely complex
hosting and services environment."

"While both certifications work
together within an integrated management framework, ISO9001 has allowed us to
understand our customers more, enabling us to serve them better – which is the
single biggest benefit for us as a business," adds Groucutt.

With ISO certification Databarracks will undergo annual external assessments by
BSi, (British Standards Institution) the internationally certification and standards body;
three-yearly re-certification; periodic internal auditing; and monthly
management review meetings. These assessments and reviews, coupled with direct
customer feedback, go to satisfy the ISO management framework requirement for
continual improvement.

"As our business has grown and our
customers have asked us for further services, we needed a more robust framework
to manage our customers’ experience of working with us," says
Groucutt. "We also wanted to ensure
that the cloud-based services we offer are designed, built and managed with
security at the forefront of every single process."

"It is very satisfying to know that a lot of
what we had been doing for all these years is right and also very rewarding to
find areas of the business and our service delivery which we could improve
upon," says Groucutt. "I
always think that a business is a bit like a fish, if it is not swimming
forward then it is probably drowning. Taking time to ask questions about every
single element of our business has been an extremely rewarding process."