Why is this New Security Standard So Important?
As we navigate a rapidly evolving digital era, the importance of information security, especially in the event technology industry, is paramount. That’s why Eventbase is proud to be one of the first organizations to have earned the new ISO 27001:2022 certification, a testament to our dedication to maintaining the highest standards of information security in our mobile event app platform.
Achieving 27001:2022 certification from the International Organization for Standardization (ISO) demonstrates an organization’s adherence to globally recognized best practices in data security management. But did you know that there are large differences between the old ISO 27001:2013 standard and the new ISO 27001:2022 standard?
Understanding the new ISO 27001:2022 Certification
ISO/IEC 27001 is the world's best-known standard for Information Security Management System, or ISMS. This certification offers a framework for managing sensitive data and includes a systematic approach involving people, processes, and technology to protect against unauthorized access, use, disclosure, or destruction of information. In an era where cybercrime is escalating and new threats are constantly emerging, ISO/IEC 27001 is crucial for organizations to become risk-aware and proactive in identifying and addressing vulnerabilities.
Released in October 2022, the latest ISO/IEC 27001:2022 standard represents a major upgrade from the outdated 2013 version, reflecting nearly a decade of technological and privacy advancements. In the last ten years, cloud computing has gone from infancy to mainstream, smartphones have become ubiquitous, and remote workforces have become commonplace. The field of information security has similarly evolved. With cyber crime causing an estimated $8 trillion USD in damages in 2023 and projected to inflict $23.8 trillion annually by 2027, the complexities and challenges of data protection have intensified. This escalation underscores the need for updated and advanced security measures, as embodied in the new 2022 standard.
This latest version introduces more rigorous and contemporary requirements and reflects the sweeping fundamental changes in the industry that relate to data privacy, security, software development, GDPR, distributed teams, and cloud services.
The ISO standard emphasizes its approach to information security by focusing on three key principles:
Confidentiality: This ensures that only authorized individuals have access to the organization's information. A potential risk here is the unauthorized acquisition and sale of clients’ login details by criminals.
Information Integrity: This principle guarantees the accurate and secure storage of data. An example of a risk to integrity could be inadvertent data loss, such as a staff member accidentally deleting important information.
Availability of Data: It's crucial that both the organization and its clients can access necessary information when needed. A risk to this principle could be operational disruptions, like a server failure leading to database inaccessibility, especially if there is a lack of adequate backup systems.
Leading with Security and Trust
Adopting the ISO/IEC 27001 framework allows us to reduce vulnerability to cyber-attacks, respond to evolving security risks, provide robust software, and ensure the protection of assets. It also provides a centrally managed framework for securing information in all forms and helps in complying with privacy and regulatory expectations. For our clients, this certification offers trust and confidence in our commitment to safeguarding sensitive data.
Eventbase has always provided the most robust and secure event technology on the market, proven at many of the world’s largest events including three Olympic Games, South By Southwest (SXSW), the Consumer Electronics Show (CES) and massive enterprise events for Salesforce, Cisco, SAP, Deloitte and many more. Millions of attendees across thousands of events have held Eventbase's products in their hands, navigating conference floors, participating in sessions, and interacting with others onsite; and they can do so with confidence that their information is secure and protected by the latest standards of information security. Our achievement of the new ISO 27001:2022 certification is not just a milestone for us, but a reassurance for every attendee who relies on our technology for their event experiences. This commitment to security is a core part of our mission, ensuring a safe, reliable, and innovative event experience for all.
