IRIS Corporation Berhad (IRIS) has been awarded the ISO/IEC 27001:2013 certification in recognition of its standardized best practices and effective information security management system (ISMS) for digital identity security across the organisation.

The ISO/IEC 27001:2013 certification demonstrates IRIS’S obligation to leverage on domestic and international expertise to embrace global standards of service provision in compliance with applicable regulatory requirements to further its business objectives and scientific goals, and provide superior quality to its sponsors.

The standard ensures controls are in place to reduce the risk of security threats and to avoid system weaknesses being exploited. It will also help IRIS to develop a business continuity plan that will minimize impact of any security breaches.

IRIS recognises the important of this certification and acknowledges that ISO/IEC 27001:2013 will ensure employees in the organisation-from management to technical staff-to get on the same frequency regarding goals, individual duties, improving communication and ultimately results.

In summary, this achievement signifies IRIS’S commitment to deliver the highest quality information security management system for our customers worldwide.

ISO 9001:2015 sets out the criteria for a quality management system and is the only standard in the family that can be certified to (although this is not a requirement). It can be used by any organization, large or small, regardless of its field of activity.

In fact ISO 9001:2015 is implemented by over one million companies and organizations in over 170 countries. Where any requirement(s) of ISO 9001:2015 cannot be applied due to the nature of an organization and its product, this can be considered for exclusion.

The standard is based on a number of quality management principles including a strong customer focus, the motivation and implication of top management, the process approach and continual improvement. Using ISO 9001:2015 helps ensure that customers get consistent, good quality products and services, which in turn brings many business benefits.

Intergraf ISO 14298 specifies requirements for the management of security printing processes.

Our commitment to the Intergraf ISO 14298 security management system, together with active and proactive risk management, enhances our strength and resilience to risk and potential threats.

At IRIS, the Intergraf ISO 14298 certification extends trust and demonstrates our competence, particularly in:

• Aligning with the industry standard for quality and information security management (ISO 14298 aligns with ISO 27001);
• Supporting most, if not all, preferred supplier status and/or tender responses;
• Clearly setting out how to address and manage the key security printing or supplier requirements;
• Demonstrating how information and printing/supply chain systems are safeguarded;
• Helping us and our customers to prepare for the unexpected; and
• Securing market differentiation.

CWA 15374 certification does not only combine a wide variety of security requirements in order to guarantee maximum security from development to deployment of a printed product. They actually go beyond the requirements of the publicly available international standard to provide core requirements for interacting and conducting business in today’s security printing market.

As a trusted security supplier, CWA 15374 certification extends trust and demonstrates IRIS competence, particularly in:

• Aligning with the industry standard for quality and information security management (CWA 15374 aligns with ISO 27001);
• Implementing a proven security management system
• Providing a recognised reference for governments and industry
• Strengthening customer’s confidence and satisfaction; and
• Helping to fight forgery and counterfeit.