CIRQ Announces ISO 27001 Certification of Decision Intelligence Company, Gongos, Inc.
CIRQ, an audit and certification body that is a subsidiary of the Insights Association, has awarded certification to Gongos, Inc. for compliance to the ISO 27001 Standard – Information technology – Security techniques – Information security management systems – Requirements. The certification has been verified by CIRQ partner PECB, globally recognized and accredited by IAS (International Accreditation Service). Accredited certification to ISO 27001 involves undertaking regular reviews and internal audits to ensure the continual improvement of the ISMS. Gongos’ certification will be verified annually by CIRQ’s independent audit establishing continued compliance and protection of data.
ISO 27001 provides a framework for companies to manage their data security. It establishes requirements for information controls to manage people, processes and technology. The standard covers both the technological aspects of security as well as corporate security, physical security, etc., and relies on regular risk assessments enabling a company to consistently identify and treat security threats. ISO 27001 is accepted worldwide as an assurance that proper and continual measures have been taken to protect valuable company data.
The scope of Gongos, Inc.’s certification covers the management of Information Security for the processes necessary to deliver market research and consulting services to clients.
“Our compliance measures have considerably strengthened over the past several years due to client protocols,” said Brian Nagy, Director, Infrastructure, Gongos, Inc. “But the universal standards of ISO are recognized in all sectors, strengthening our client relationships across the board, while showing our commitment to information security.”
About ISO 27001
ISO 27001 provides requirements for establishing, implementing, maintaining and continually improving an information security management system. The information security management system preserves the confidentiality, integrity and availability of information by applying a risk management process and gives confidence to interested parties that risks are adequately managed. It is important that the information security management system is integrated with the organization’s processes and overall management structure and that information security is considered in the design of processes, information systems, and controls. It is expected that an information security management system implementation will be scaled in accordance with the needs of the organization. This International Standard can be used by internal and external parties to assess the organization’s ability to meet information security requirements. ISO 27001 can be mapped to other information security schemes such as Hitrust, NIST and Soc2. Compliance with the standard also enables a company to meet global security laws, such as the NIS Directive and the GDPR.
About CIRQ
A subsidiary of the Insights Association, CIRQ was established to provide assessment and certification services to market research firms seeking certification to ISO 20252, ISO 26362 and ISO 27001. CIRQ, a non-profit entity, is committed to providing timely, thorough, and impartial assessments of its customers’ quality management systems or information security management systems in order to make a determination regarding certification to corresponding standards. All CIRQ auditors for ISO 20252 and 26362 have extensive experience in the market research industry. All ISO 27001 auditors are certified lead auditors and have comprehensive information security credentials. CIRQ has been established in compliance with all ISO requirements for certification bodies that provide auditing and certification services. In order to conform to its mandate of objective and impartial audits to these ISO standards, CIRQ attests to ISO/IEC 17065 Standard for Conformity assessment Requirements for bodies certifying products, processes and services conducted by external authorities on ISO-certification bodies.
ISO 27001 audit and certifications are conducted in collaboration with the Professional Evaluation and Certification Board (PECB), an IAS-accredited certification entity and in accordance with the PECB auditing and certification procedures.
About Gongos
Gongos, Inc. is a decision intelligence company that partners with Global 1000 corporations to help build the capability and competency in making great consumer-minded decisions. Gongos brings a consultative approach in developing customer-centric growth strategies propelled by its clients’ insights, analytics, strategy, and innovation groups. Among the AMA Gold Top 50 U.S. market research organizations, Gongos works with companies such as Mars, Kellogg, Johnson & Johnson, UnitedHealthcare, GM and FCA. For further insight into the Gongos culture, visit gongos.com.
To see the original posting of this news release via the Insights Association, click here.