Daegis Receives ISO/IEC 27001 Compliance Certification for Information Security

Daegis, a leading provider of eDiscovery solutions, announced today that it has received ISO/IEC 27001 re-certification for its litigation support and eDiscovery services. Daegis received its initial certification in April of 2009. The re-certification stands as a testament to Daegis’ commitment to preserving the confidentiality, integrity and availability of all information assets in its possession.

ISO/IEC 27001:2005 is an internationally recognized information security management system standard developed by the International Organization for Standardization (ISO). The ISO standard specifies the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented Information Security Management System within the context of the organization's overall business risks.

As the number of platforms on which data is created and stored continues to grow and diversify, information security is becoming a significant challenge for corporations and their vendors. This problem is compounded by the sheer amount of data that must be secured. According to International Data Corporation (IDC), the volume of digital information may balloon from 2.7 zettabytes this year -- the storage equivalent of 2.7 billion Apple iMacs -- to 8 zettabytes by 2015. When choosing vendors, corporations – particularly those in heavily regulated industries such as pharmaceutical, finance and healthcare – need an independent standard by which to self-evaluate the information security of the vendors. The ISO/IEC family of standards provides this evaluation framework.

The ISO/IEC 27001 sets forth a formal process by which all information security management systems must be centralized under management’s control. In order to demonstrate compliance, Daegis’ management team systematically reviewed the organization’s information security risks, constructed and implemented a comprehensive set of information security policies, procedures and controls to address all areas of risk, and implemented a management process to ensure that information security policies will evolve to meet the needs of Daegis and its clients. The process involved an audit of each of Daegis’ offices and its complete Information Security Management System (ISMS) by a team of external auditors. Daegis’ certification is valid for three years, with annual compliance audits performed each year.

“Information security is perhaps the number one challenge facing enterprises this year as they struggle to adapt policies to new technologies from mobile to cloud. Daegis is committed to preserving the confidentiality, integrity and availability of all physical and electronic information assets throughout the organization, and ISO/EIC 27001 certification is the gold standard,” said Doug Stewart, Director of Technology at Daegis. “Since receiving our first ISO 27001 certification in 2009 information security has become a major focal point of our eDiscovery approach. This focus has proved transformational in the development of our products, services and methodologies, and remains a key reason clients select Daegis for their eDiscovery projects.”

In addition to satisfying the ISO/IEC 27001 certification requirements, Daegis demonstrates its commitment to information security best practices with innovative technology solutions and methodologies designed to limit risk as information moves throughout the eDiscovery lifecycle. The company’s leading edge Cross-Matter Management methodology helps Daegis clients preserve the integrity of data by limiting the number of copies required for eDiscovery, and allowing clients to store all data in a secure, central repository for use in future matters. Likewise, the Daegis eDiscovery Platform provides an end-to-end solution for eDiscovery, from collection and processing to review and production that meets the ISO/IEC 27001 standards for information security.

For more information on Daegis’ ISO/IEC certification, please visit: http://www.daegis.com/about-daegis/iso-certification/.

About Daegis

Daegis (NASDAQ: DAEG) is a leading provider of eDiscovery solutions. The Daegis eDiscovery Platform combines technology and on-demand services to deliver comprehensive and cost-effective solutions for corporations and law firms. Daegis’ technology is revolutionizing eDiscovery through Cross-Matter Management, which enables the retention and reuse of custodian data and attorney work product from one matter to the next, mitigating the risk of inconsistencies and reducing costs by avoiding repetitive steps throughout the eDiscovery lifecycle. For more information, visit www.daegis.com, www.ediscoverycalculators.com or follow us via our blog and Twitter at @daegis.

© 2008 SYS-CON Media