ISO 27001 is a global information security management standard created by the International Organization for Standardization in 2005. Previously this standard was covered by the BS 7799 standard published by the BSI Group. The standard requires that information security in a company is consistently monitored and managed, and that security measures are taken in every sphere of a company’s operation (from the protection of digital information stored on devices to the physical security of their office space).

As of September 3, 2019, QArea’s team meets the the ISO 27001:2013 standards as certified by the Bureau Veritas certification agency (certificate number: ind.19.6776/U).

What this Means to Us
Similarly to the CMMI-Dev appraisal that our team went through last year, the Bureau Veritas certification agency audited our offices, our development practices, and the processes with which our leadership and team consistently implement information security best practices.

This means that security measures are preventative, organized, and consistent. We are certifiably proactive in our efforts to achieve information security. Our management consistently conducts risk assessments, and our teams undergo training and awareness programs to ensure all ISMS (Information Security Management Systems) are implemented on an individual and company-wide level.

What the Certification Means for Our Clients
Since QArea’s establishment in 2001 our teams have always prioritized quality, and this includes the quality of our security protocols. However, our team chose to go through a security audit and the ISO 27001 certification process to establish credibility of our efforts.

All this is to say, QArea has and will continue to care about the security of our client’s information. From the code written for client projects to the documentation created by our development and QA teams — our company has implemented the necessary practices to prevent any third parties from compromising the security of the physical and digital spaces in which we work.

We look forward to our continued work with existing clients and to the new projects we can undertake with companies for whom the certifiably thorough information security standards are a prerequisite to long-term collaboration.