4PS Group obtains ISO 27001 certification

As a cloud software provider for the construction industry, we make data security a priority. Our customers are supported with software based on the secure Microsoft Dynamics 365 Business Central platform.  As Microsoft invests billions in cybersecurity and their Microsoft Azure data centres are ISO 27001/27002 certified, customers know their data is safe in the Azure Cloud.

Please have a look at our certificate here.

Similarly, our employees also handle privacy-sensitive data of both customers and colleagues. To emphasise that 4PS Group treats this data in a safe and responsible manner, we originally decided to obtain ISO 27001 certification. The successful renewal of our certification reinforces this ongoing commitment and helps us continue to meet the requirements of the ISO 27001 standard.

ISO 27001 is an important international standard for information security. This standard prescribes how companies handle information security process-wise. It ensures the confidentiality, availability and integrity of information within the organisation.

Central to the certification process is setting up an Information Security Management System (ISMS). An ISMS is not a stand-alone system, but it refers to a certain way of working. An ISMS ensures that you continuously manage (confidential) information according to a standardised way to ensure the security of this data.

At 4PS Group, we use SharePoint to shape this ISMS. At one central location, we collect all documents surrounding our information security policy. This system is accessible to all 4PS Group employees and includes the information security policy, risk analysis, audit results and our continuous improvement plan.

When 4PS originally obtained ISO 27001 certification in 2023, we asked Esther Koenders, project manager at 4PS, to take us through the intensive but insightful certification process.

“About a year ago, we decided to start the certification process. We did so primarily to ensure that we handle all privacy-sensitive data correctly in our processes. Also, we noticed that more and more customers had questions about ISO 27001,” begins Esther.

“We set up a project team with colleagues from various departments and with different expertise. It was often a challenge to combine the ISO project with our other work. Nevertheless, the process was very valuable for us because it provided us with insight into all possible risks. We noticed along the way that we had actually already got a lot of things right, which was very reassuring,” laughs Esther.

“Because we did not yet have an ISMS, we had to put a lot of things in writing. That took some getting used to, but it was great to see that all colleagues were fully on board with the importance of this project. Everyone did their best to contribute,” emphasises Esther. “Because we kept the organisation well-informed about the importance and progress of the project via updates on SharePoint, there was no reluctance to work differently. Everyone clearly understood that this was an opportunity to optimise our processes. It is thanks to this positive attitude and the commitment of all colleagues, in particular our Information Security Officer Har Greijn, that we now have our ISO 27001 certificate in our hands,” concludes Esther.

Successfully renewing our ISO 27001 certification marks another step in our continued commitment to data and information security. The renewal reinforces the importance we place on continuously reviewing and improving the way we manage information security across 4PS Group.

Would you like to know more about our ISO 27001 certification? Then contact your 4PS Account Manager. Are you not yet using our secure cloud software but would like to know more? Then download our 4PS Construct brochure!