LOGIC Achieves ISO 27001 Certification

Following the implementation of robust measures and a thorough auditing process conducted by Deutsche Gesellschaft zur Zertifizierung von Managementsystemen (DQS), with external consultancy support from DataGuard, LOGIC media solutions GmbH has successfully attained certification for the ISO 27001 standard.

The DIN EN ISO/IEC 27001 is the internationally recognised benchmark for establishing a comprehensive Information Security Management System (ISMS) and is a globally acknowledged standard.

In addition to its role as a system architect for broadcast and media infrastructures, LOGIC is evolving into a service-oriented organisation, managing projects increasingly defined by software, programming, and cloud services. With the certification, LOGIC demonstrates to its clients and partners that it meets the highest standards in this field by implementing stringent technical and organisational measures. The company has long prioritised the security of client data and internal processes to ensure reliability for its clients and partners.

By obtaining ISO 27001 certification by 27 July 2024, LOGIC has reinforced its commitment to information security. This certification underscores its rigorous standards, particularly concerning remote work, and strengthens its collaboration with clients.

Markus Reinisch, Head of Finance and Administration at LOGIC, elaborated on the certification process: "The ISO 27001 certification of our ISMS and procedures is an extensive undertaking, impacting all processes within the company. Beyond a meticulous evaluation of potential risk areas, documentation, and restructuring of IT processes, we implemented structural changes at our offices that contributed to the successful certification. Our prior focus on this area allowed us to build upon existing measures, simplifying the certification process and delivering a positive outcome."

The certification aligns LOGIC with several regulatory developments. For instance, Germany’s Federal Office for Information Security is introducing increasingly comprehensive requirements for information systems. Meanwhile, the EU has adopted the NIS2 directive, which member states must transpose into national law. Implementing the comprehensive and stringent ISO 27001 standard makes LOGIC well-posed to adapt to these regulations.

The certification also sends a strong signal to clients. Public broadcasters, designated as critical infrastructure entities (KRITIS), require such assurances for future collaboration. Moreover, the certification streamlines procurement processes, as system-critical clients demand extensive guarantees regarding information system security. By meeting the exact stringent requirements, LOGIC demonstrates its alignment with client needs and expectations.

Internally, the certification process has yielded significant benefits. Jens Gnad, Managing Director of LOGIC, explained: "The advantage of such a certification lies in the opportunity to comprehensively examine all processes along the entire value chain. It prompts us to evaluate whether we are doing things right, identify optimisation potential, or address previously overlooked risks. This ranges from building access controls to IT security at workstations, the secure programming of software products like PORTAL, and our collaboration with hyperscalers, for whom we increasingly act as a service provider. Employee awareness and training in this area are equally critical, as the implementation of information security measures requires company-wide participation."

The ISO 27001 certification of LOGIC media solutions GmbH is valid for a period of three years, during which time the effectiveness of the management system will be reviewed again in two surveillance audits by DQS.

As an accredited certification body, DQS conducts audits and assessments based on client specifications and industry standards, offering certifications under more than 200 national and international norms, standards and regulations. DQS was founded in 1985 as the first German certification body for management systems by DIN (German Institute for Standardisation) and DGQ (German Society for Quality). DQS’s extensive experience and expertise were key factors in LOGIC’s decision to partner with them.

DataGuard, a leading provider of SaaS security and compliance software, helps businesses identify and manage security risks, fast-track certifications and comply with industry frameworks like ISO 27001 with its intuitive platform and expert consultancy. The company provided essential support with the certification process. LOGIC leveraged the DataGuard platform and its comprehensive consulting to meet GDPR compliance and establish a functioning ISMS aligned with upcoming NIS2 requirements.

logic.tv