Preact Achieves ISO 27001 Certification

Achieving this certification demonstrates our commitment to ensuring the highest levels of information security, and protecting our customer and company data.

Preact has been certified as meeting the requirements of ISO 27001:2013. This covers our Information Security Management System for the provision and support of Microsoft Dynamics 365, Power Platform and other related technology products and services.

This follows a rigorous independent assessment undertaken by the British Assessment Bureau, a leading certification body to analyse our policies and interview members of our team. During this process, we demonstrated to the auditor that our working practices match our information security policies, and we were delighted to pass with flying colours.

Working in partnership with ADL Consulting, the project was sponsored by our management team and engaged staff across our business.

ISO 27001 involves a continual improvement programme to ensure risks, vulnerabilities and threats throughout the business are identified and addressed. Maintaining this certification is subject to an annual review with a major three-year audit cycle to ensure that Preact’s Information Security Management System remains in conformity to these standards.

Selom Bulla, Managing Director, Preact:

"We are delighted to have achieved the ISO 27001 certification, and doing so underscores our total commitment to the very highest standards in information security, privacy and management.

“We appreciate that data is one of an organisation's most valuable assets and we take our responsibility very seriously to protect our customers and ourselves from the ever-increasing risks of data breaches and cyber-attacks. I am incredibly grateful to our entire team for their support in gaining this accreditation and for their ongoing commitment in ensuring we maintain this standard of data security and integrity which is hugely important as a Cloud Solutions Provider.”

About ISO 27001

ISO 27001 requires the implementation of an Information Security Management System which outlines a framework of policies and procedures to mitigate the risk of a security breach. This certification provides a basis for operating, monitoring, reviewing, maintaining and improving an ISMS, and covers all aspects of our organisation’s information risk management process.

This means that Preact has:

• Identified information security risks and systematically evaluated these considering the impact of threats and vulnerabilities.
• Created a series of controls to mitigate these risks.
• Implemented processes to review these risks and controls.
• Been audited by an ISO accredited organisation to test for conformity.
• Committed to an ongoing program of internal audits.

What Does this Mean for Preact Customers?

ISO 27001 status is additional proof of our commitment to information security. We hope this certification will give further confidence to our customers that Preact will always treat data with integrity and confidentiality to mitigate security risks as much as possible.

Achieving this certification is a major milestone for us but it is by no means the end of the journey. We are committed to the continuous improvement of our security standards which reflects the paramount importance we give to protecting company and customer data.