Any organisation shares information with the systems it relies on to operate, and meetings are where much of that information lives. Financial discussions, staffing matters, commercial strategy, legal advice: the content of a typical meeting often contains a wide range of sensitive information. For that reason any tool sitting inside that process needs to be held to a high standard. That’s the standard Scriba holds itself to and is why we are ISO 27001 certified alongside Cyber Essentials Plus.
What ISO 27001 covers
ISO 27001 is the internationally recognised standard for information security management. It isn’t a single check or a one-off audit. Certification requires an organisation to demonstrate a working information security management system: documented policies, risk assessments, access controls, incident response processes and ongoing internal audits, all independently verified by an accredited certification body.
In practice, this means every part of how we handle data, from the way our systems are built to how our team is trained, has been assessed against a recognised international benchmark. Certification isn’t awarded once and forgotten either. It requires continued surveillance audits and the standard has to be met on an ongoing basis, not just at a single point in time.
Why it matters for governance and operational meetings
Meetings frequently touch on matters that are confidential by nature. For example, in board meetings, governors and trustees will discuss staffing, organisational risks, financial concerns and much more, often all within the same 2 hour meeting. Anyone processing that information needs to treat it with due care and consideration.
Achieving ISO 27001 provides independent assurance that Scriba’s approach to information security has been examined and tested. It sits alongside our existing commitments to UK GDPR and data protection best practice, adding a further, externally verified layer of confidence for the organisations who trust us with this information.
What this means for you
If you’re considering Scriba, ISO 27001 certification is now part of the evidence base you can draw on. It can provide further information for conversations with your DPO, IT team or governance team, since the standard is one that most procurement and information security processes already recognise.
If you’d like a copy of our certificate or further detail to support your own assurance process, just get in touch at enquiries@scriba.co.uk.
We’d like to thank Tempo, a UKAS accredited auditor with experience across the tech sector, for their work with us throughout the certification process. Their approach was rigorous and clear and their guidance made a demanding process much easier to navigate.