ISO/IEC 27001:2022 Certification & Information Security Management System (ISMS) Policy
Protecting information through a culture of security, responsibility and continuous improvement.
At Avantech Ltd, information security is fundamental to how we operate. Our Information Security Management System (ISMS) Policy establishes the principles, responsibilities and controls that help us protect the confidentiality, integrity and availability of information across our organisation.
Our Information Security Commitment
Information security is more than a technical requirement—it is an essential part of delivering trusted services to our customers, partners and employees.
Our ISMS Policy provides the framework for managing information securely by defining how we identify risks, protect information assets and continually improve our security practices.
It applies across our organisation, covering employees, contractors, business processes, information systems and information assets in every format.
For more information about our approach to information security, risk management, incident handling and continual improvement, you can review our Information Security Management System (ISMS) Policy
Our Information Security Principles
Our Information Security Management System is built around internationally recognised security principles that guide our day-to-day operations.
Confidentiality
Ensuring information is only accessible to authorised individuals and protected against unauthorised disclosure.
Integrity
Maintaining the accuracy, completeness and reliability of information throughout its lifecycle.
Availability
Ensuring critical information and systems remain available whenever they are needed to support business operations.
Risk Management
Identifying, assessing and treating information security risks through a structured and continually monitored approach.
Continual Improvement
Regularly reviewing our processes, measuring performance and strengthening our security controls to respond to evolving threats and business requirements.
What Our ISMS Policy Covers
Our Information Security Management System Policy establishes a consistent framework for protecting information by focusing on:
- Information security governance and accountability
- Risk assessment and risk treatment
- Protection of information assets
- Legal, regulatory and contractual compliance
- Security awareness and employee responsibilities
- Incident management and reporting
- Business continuity and resilience
- Ongoing monitoring and continual improvement
Together, these elements help ensure information is managed responsibly across the organisation.
Our ISO/IEC 27001 Certification
Achieving ISO/IEC 27001:2022 certification demonstrates that Avantech has established a structured Information Security Management System for identifying and managing information security risks, protecting information assets and continually improving its security practices.
Certification is not the end of our information security journey. Through our ISMS, we remain committed to monitoring risks, reviewing our controls and continually improving how we protect information across the organisation.
ISO/IEC 27001:2022 Certificate
Certificate No. CZE – 2600248
Issued by Bureau Veritas Certification CZ, s.r.o.
Valid until 20 August 2029
Why Our ISMS Matters
Our Information Security Management System enables us to:
- Protect sensitive business and customer information.
- Manage information security risks proactively.
- Strengthen operational resilience.
- Promote a culture of security awareness across the organisation.
- Support compliance with legal, regulatory and contractual obligations.
- Continually improve our security practices as threats and technologies evolve.
Our Commitment
Information security is a shared responsibility across Avantech Ltd.
Through our Information Security Management System Policy, we are committed to protecting information assets, managing security risks responsibly and embedding security into our people, processes and technologies.
As an ISO/IEC 27001:2022 certified organisation, we remain focused on delivering secure, reliable and trusted services while continually monitoring, reviewing and improving our Information Security Management System.
