ISO-27002-(17799) News

ISO Security Assessment Gives High Marks to Workscape

(April 17, 2009) - A leading provider of outsourced benefits and talent management solutions, Workscape, Inc., announced that the company has achieved a very high degree of compliance with the ISO 27002 standard, according to SystemExperts Corporation, the premier provider of IT compliance and network security consulting services. SystemExperts recently performed an ISO 27002 Baseline Assessment of Workscape, focusing primarily on its production infrastructure. The ISO 27002 standard establishes guidelines and general principles for initiating, implementing, maintaining and improving information security management within an organization. Workscape's compliance with ISO 27002 demonstrates the company's unflagging commitment to maintaining thorough system security standards.

"After an extensive review, SystemExperts attests that Workscape has achieved a very high degree of compliance with the ISO 27002 standard. The review also revealed no operational weaknesses," stated Jonathan G. Gossels, president and CEO of SystemExperts. "We applaud Workscape's documentation of its practices, policies and procedures. It has done a remarkably thorough job."

The SystemExperts ISO 27002 Compliance Program is a structured methodology designed to help companies build comprehensive and cost-effective enterprise security programs, ensuring that security resources are applied wisely and that efforts are focused on activities that will reduce real business risk.
Bill Bergen, Workscape's CIO and Chief of Operations, added, "We pride ourselves on responding to the challenging needs of large global organizations by helping them address two of the largest controllable workforce costs for an enterprise: healthcare benefits and compensation . Given the nature of our mission, our clients have to feel confident that their business-critical data is safeguarded every step of the way with robust security measures. By undergoing regular evaluations with security consultants like SystemExperts, we ensure that our clients' information is protected under the most stringent controls available today."
As part of SystemExperts' critical security services for Workscape, Workscape will undergo ongoing system security reviews, including a semi-annual Internet Exposure Profile; monthly EXPERTscans of internal and externally-facing systems to check for vulnerabilities; and SYSIntell (SystemExperts' vendor patch and exploit intelligence service).

This distinction stands as the latest example of Workscape's ongoing dedication to safeguarding client data. Additional examples include SAS 70 Level II certification, as well as achieving Cybertrust certification for seven consecutive years.

For more information visit www.workscape.com

Share or bookmarklet this web page at: