MB receives ISO/IEC 27001:2013 certificate

11:55 | 13/04/2017

The British Standards Institution (BIS) handed over the Certificate of Information Security Management System - ISO/IEC 27001:2013 to the Military Commercial Joint Stock Bank (MB) in acknowledgement of its effective activities of providing, developing, operating and maintaining information technology services.

{&nhaykep}{&nhaykep}

Colonel Luu Trung Thai, MB’s General Director (L) receiving the certificate

According to Colonel Luu Trung Thai, MB’s General Director, the award has confirmed MB's efforts in continuously enhancing its prestige and image among its partners, shareholders and customers over the past years. One of the bank's strategic development goals in the 2017-2021 period is to build digital banking to offer more convenient services to customers. To achieve this goal, the business has continuously improved and upgraded its information technology system including the risk control system meeting all international standards, he added.

The ISO/IEC 27001 certification was originally developed on the basis of the BS 7799 of the British Standards Institution (BSI) in 1995 for information security management. Up to now, this certification has been widely applied to finance-banking sectors in many countries. The ISO 27001 certification standard updated and published its new version ISO/IEC 27001:2013 in October 2013. The latest information security management system helps effectively deal with information security risks.

The certification specifies requirements related to the information security management system such as supporting to control and orient enterprises’ activities in ensuring information security, assessing risks and limiting loss of production and business due to leaks of information and important data.

Mr. Le Duyen Anh, General Director of BSI Vietnam, also highly appreciated the MB leaders' attention to investment in technology, especially in building and successfully applying information security management system following the ISO/IEC 27001:2013 certification standard to providing, developing, operating and maintaining IT services in accordance with international standards.

Accordingly, the MB will commit itself to focusing on developing human resources and investing in ITinfrastructure, including network equipment systems, security equipment to ensure its activities, issuing policies and procedures on information safety and security.