Infor­ma­ti­on security

The manage­ment of IT Asset Manage­ment AG is awa­re of its respon­si­bi­li­ty towards cus­to­mers, part­ners and employees. In order to con­so­li­da­te our posi­ti­on as a ser­vice pro­vi­der in the area of ​​IT infra­struc­tu­re, the pro­vi­si­on of cus­to­mer-spe­ci­fic soft­ware solu­ti­ons and soft­ware pro­ducts such as OFFICE ASSET, but also to attract new cus­to­mers, the manage­ment has deci­ded to imple­ment an infor­ma­ti­on secu­ri­ty manage­ment sys­tem (ISMS). The basis for this is the inter­na­tio­nal stan­dards ISO/IEC 27001:2022.

We are dri­ven by the ambi­tious but rea­li­stic growth goals that we have set for our­sel­ves. Growth brings with it respon­si­bi­li­ty, new risks, but also new oppor­tu­ni­ties. The ambi­tious growth tar­get alo­ne typi­cal­ly crea­tes addi­tio­nal chal­lenges at the infor­ma­ti­on secu­ri­ty level, which we over­co­me through our manage­ment sys­tems and pro­ces­ses. The imple­men­ta­ti­on of the requi­re­ments of inter­na­tio­nal stan­dards is done with a sen­se of pro­por­ti­on and at the same time honest­ly and seriously.

The enti­re manage­ment is com­mit­ted to estab­li­shing a level of secu­ri­ty that cor­re­sponds to the cur­rent sta­te of the art today and in the future. For this pur­po­se, regu­lar assess­ments are car­ri­ed out to eva­lua­te the ext­ent to which the indus­try has deve­lo­ped and whe­ther the imple­men­ta­ti­on of new mea­su­res offers an oppor­tu­ni­ty to fur­ther impro­ve infor­ma­ti­on secu­ri­ty.
A regu­lar risk assess­ment enables us to sel­ect and imple­ment sen­si­ble mea­su­res to deal with the risks.
Under­stan­ding of the infor­ma­ti­on secu­ri­ty requi­re­ments is pro­mo­ted through regu­lar trai­ning and other awa­re­ness-rai­sing mea­su­res.
The main objec­ti­ves that the ISMS is inten­ded to achie­ve are con­fi­den­tia­li­ty, inte­gri­ty and availability.

The manage­ment sys­tems and the asso­cia­ted pro­ces­ses are essen­ti­al­ly con­trol­led by a stee­ring com­mit­tee. The stee­ring com­mit­tee con­sists of the infor­ma­ti­on secu­ri­ty offi­cer, tho­se respon­si­ble from the deve­lo­p­ment and IT depart­ments, and the manage­ment. The indi­vi­du­al tasks, respon­si­bi­li­ties and other orga­niza­tio­nal aspects are defi­ned and coor­di­na­ted with the management.

Gene­ral cont­act
E-Mail: [email protected]
Pho­ne: +49 7243 3488 566
Infor­ma­ti­on Secu­ri­ty Offi­cer Alex­an­der Schroth
E-Mail: [email protected]