ISO/IEC 27001 is an international standard on how to manage information security. The standard was originally published jointly by the International Organisation for Standardisation (ISO) and the International Electrotechnical Commission (IEC) in 2005 and then revised in 2013. 

It details requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS), the aim of which is to help organisations make the information assets they hold more secure, according to the ISO.

BGL managing director Ron Lesh said being recertified confirms BGL’s commitment to “providing clients with the highest level of security and data integrity”.

“Keeping up with ISO 27001 has required a significant investment by BGL and the team in building internal policies and procedures and training our team on ISO 27001 security requirements,” Mr Lesh said.

Mr Lesh said that many businesses still use desktop applications, believing cloud-based solutions are not secure or reliable.

“This is far from the truth,” he said. “Well-written cloud applications are significantly more secure. At BGL, we take data protection and security very seriously — we are 100 per cent committed to providing the highest levels of security and reliability.

“All BGL client data is hosted in Australia by Amazon Web Services (AWS) using multiple Availability Zones. This ensures our clients have the best data security available in the cloud today.”

BGL’s cloud solutions — CAS 360, Simple Fund 360 and Simple Invest 360 — successfully achieved ISO 27001 recertification in January 2020. In order to achieve this recertification, BGL had its security compliance validated by an external auditor in a rigorous process.

The firm said it had to demonstrate it has an effective information security management system that has been properly implemented and is followed by the team.

BGL said this helps to ensure the firm delivers efficient, reliable and secure cloud solutions. In addition to that, BGL’s CAS 360, Simple Fund 360 and Simple Invest 360 applications are signed by a Secure Socket Layer (SSL) certificate, which means all data transferred between the internet browser and the applications is encrypted.