We’ve passed again! DCS recertifies its ISO 27001 status

The renewed ISO 27001 accolade showcases the team’s continuous commitment to information security and data protection.

Looking at the entire scope of the business, from how the company purchases teabags to its comprehensive staff vetting procedure, the BSI assessed and commended virtualDCS on its processes and unique structure towards ISO 27001.

ISO 27001 is the internationally recognised standard for Information Security Management Systems (ISMS). It sets out best practice for managing sensitive information, combining technical controls with robust business processes to ensure that data is handled securely, consistently, and responsibly. For customers, this certification provides independent verification that security is embedded across the organisation - not treated as an afterthought.

During the recertification process, the British Standards Institution (BSI) assessed the entire scope of the business. This included everything from procurement procedures and supplier management to comprehensive staff vetting and operational processes. The audit recognised virtualDCS not only for its technical controls, but also for its structured and organisation-wide approach to information security governance.

Richard May, Managing Director of virtualDCS, said:

“There’s often some confusion around the standards and what they cover, but in essence, the re-certification shows that we’re managing customer data in the most secure way possible. This means that anyone who works with us can continue to be confident that we’re handling their information with the utmost sensitivity.

Many businesses that have an ISO 27001 certification tend to heavily limit the scope of the audit, but we wanted to encapsulate the entire business and its practices. If we’re going to be certified, then we’re going to do it right.”

Recertification was truly a team effort as each employee within the company is responsible for a set of unique standard operating procedures. These procedures are monitored and updated by the appointed team member. virtualDCS chose to deploy this unique approach so that information security would be at the forefront of everyone’s mind and at the heart of the business.

If you would like to learn more about how virtualDCS protects and manages customer data, contact our team to discuss your security and compliance requirements.