22 July 2015
- Cecabank has obtained an information security certificate for its information systems. These systems are used to receive, process and transmit transfers and debits that have been adapted to SEPA (the Single Euro Payments Area)
- This certificate is obtained in accordance with the ISO 27001 Standard and has been awarded by AENOR (the Spanish Association for Standardisation and Certification)
The certificate confirms that Cecabank has implemented an Information Security Management System (ISMS). This enables it to identify the risks of each information asset, assess the implications and adopt the most effective controls to mitigate them.
In addition, the ISMS installed at Cecabank ensures full compliance with legal security requirements on the protection of intellectual property. It also protects personal data and information society services and establishes a permanent review of the measures implemented.
Cecabank's effective management of information security involves measures to protect various areas. These include confidentiality, to ensure that only authorised individuals can access information; integrity, to ensure that information is accurate and complete and processed in the correct way and availability, so that authorised users have access to information and its associated assets when they require it.
The Company Registration Certificate is nº SI-0023/2015. AENOR has awarded it to Cecabank as evidence and recognition that its management system complies with UNE-ISO/IEC 27001:2014.
Javier Planelles, Director of Cecabank's Operations Division, also gave his thoughts on this matter. "Obtaining this certificate confirms that it is our aim to provide our customers with an excellent service by continuously improving the quality and security of all our processes."
Information security is key for Cecabank
Manuel Romero, AENOR's Director of Certification, also gave his point of view. "ISO 27001 has become the global benchmark for information security. Cecabank has implemented the new version of this international standard. It pays greater attention to the context of organisations and to security objectives and risks".
This certification is in addition to the certificates obtained for Securities, Fund Depository and Payment System services. It is also part of Cecabank's culture of continuous improvement and quality of service. Cecabank is committed to this culture, which forms part of its strategic plan.
The interest of Spanish companies in this certification has made Spain one of the top ten countries in the world with respect to the number of Information Security Management System certificates awarded. It has also made AENOR the leading certification organisation, having already granted nearly 500 certificates.
About AENOR
By developing technical standards and certifications, AENOR is contributing to improving both the quality and competitiveness of companies and the quality of their products and services. This helps organisations to build trust.
As the organisation that is legally responsible for standardisation in Spain, AENOR offers the financial sector a range of more than 30,500 standards with effective solutions. AENOR is also the leading company in certification, since its recognitions are the most highly valued. More than 40,000 effective certificates support organisations in numerous different fields. These include certificates for Quality Management, Environmental Management, R&D+I, Occupational Health and Safety and Energy Efficiency. AENOR has performed nearly 500 environmental verifications and validations and more than 11,750 inspections.
AENOR was created in 1986 as a private not-for-profit entity. It has 20 offices in Spain and a permanent presence in 12 countries.
About Cecabank
Cecabank is a Spanish wholesale capital bank with a vocation to serve all financial institutions. It specialises in Securities Services, Treasury and Banking Services and bases its management philosophy on a desire for knowledge, the art of prudence and openness to change.
