The Securities and Exchange Commission of Pakistan has become the first Pakistani regulatory organisation to win ISO/IEC 27001: 2005 certification. It has been earned by Information Systems and Technology (IS&T) Division. Ghulam Haider, CEO of M/S Direct Assessment Services (DAS) Pakistan presented the certification to the SECP chairman on Thursday. It is top international standard for evaluating information security management systems.
While receiving the certification from M/S DAS Pakistan, a local presence of the UK-based third party audit service provider, Muhammad Ali, the SECP chairman, described it as a major achievement. The chairman awarded certificates of commendation to the entire ISMS project team in recognition of their valuable contribution towards achieving ISO/IEC 27001: 2005 certification.
Arshad Javed Minhas, executive director, IS&T Division, called the certification a significant indicator of SECP's commitment to the world's information security standards. It is a continuation of SECP's efforts for employing advanced technologies to ensure data confidentiality, integrity and availability.
The positive results of the third party audit and verification process, which was carried out by the M/S DAS, confirmed that the IS&T Division had ensured that the information was kept confidential, accurate and healthy. The third party audit service provider praised the IS&T Division's implementation of information security systems, saying that it would be a driving force for the corporate sectors in Pakistan to address IT governance.-PR