By obtaining the ISO 27001 certification, Labgroup has further strengthened its commitment to establish a genuine relationship of trust with its clients regarding the way their information is secured. Obtaining this certification is part of Labgroup’s strategy to gain the PSDC certification (Digitisation and Archiving Service Provider), an important law project still pending approval by the Luxembourg Parliament.
This certification affords a guarantee to all stakeholders that the security of the information is managed effectively. In particular, it affirms that management is fully implicated and that there is a clearly documented information security mechanism in place whose quality infrastructure employs advanced security measures, a dedicated incident management process and relevant risk management.
Furthermore, the scope of the certification covers all departments and services within Labgroup, without making any distinction between them. Labgroup’s Information Security Management System (ISMS) thus covers the management and supervision of document and media storage and destruction, dematerialisation services, electronic data storage (Data Centre), all its IT services, business continuity services (Disaster Recovery), its consulting services and its activities associated with Human Resources, Purchasing, Administration and Accounting.
“We are particularly proud to have obtained ISO 27001 certification, which is an important step towards obtaining PSDC status (Prestataire de Services de Dématérialisation ou de Conservation), consolidating Labgroup’s legal position as a trusted third-party for information dematerialisation and exchange. Given our status as a Professional of the Financial Sector (PSF), this certification will also strengthen the confidence of our financial sector clients in the reliability of our solutions”, explains Bernard Moreau, Chief Executive Officer of Labgroup.
Johann Alessandroni, Information Security Manager at Labgroup, adds: “Regarding the current standards of Labgroup’s professional and information security, ISO 27001 certification means formalising all of the processes in place in the company in order to guarantee the quality of our ISMS for our clients. The scope of our certification also demonstrates our desire for thoroughness at all levels. “
Collaboration with CRP Henri Tudor – Labgroup has worked together with the Public Research Centre CRP Henri Tudor to develop a methodology to meet the combined requirements for ISO 9001, ISO 27001, the future PSCD certification and also the Luxembourg Financial Regulatory Authority (Commission de Surveillance du Secteur Financier – CSSF), in regards to the directive 12/544 aimed at the PSF companies in Luxembourg. The ISO 27001:2005 certification was awarded by Bureau Veritas. With the ISO 27001 certification at hand, Labgroup has now paved the way to be the first company in Luxembourg to obtain the PSDC certification. ( > See also white paper on collaboration with CRP.)
PSDC pending approval by the Luxembourg Parliament – The current legislative framework relating to the dematerialisation and the conservation of documents in digital form is covered by a law and regulation dating from over 25 years ago. The new draft law 6543 is intended to replace this law, which will bring important changes to the electronic archiving, preservation and destruction of documents, especially documents which will require legal value. With the new law, Luxembourg intends to set new standards in electronic archiving and position itself as the “electronic safe” at the heart of Europe.
The technical specifications of the future PSDC certification – provided by the Luxembourg Institute for Standardization, Accreditation, Safety and Quality of Products and Services (ILNAS), a public service under the authority of the Minister in charge of the Economy – is the foundation to be able to perform the dematerialisation and conservation services according to the new law.
Draft law 6543 was filed with the Luxembourg Parliament on February 13th 2013 and was postponed due to early parliamentary elections, it is expected to be implemented in the course of this year.
Labgroup is a Luxembourg-based company that offers information management and archiving services to businesses in the financial and insurance sectors and to administrations and businesses from other sectors. Labgroup’s range of services includes digitising paper documents, storing and destroying physical archives, capturing and conserving electronic archives, protecting and restoring data, preserving IT media and giving consulting services and training. Labgroup also has offices in Ireland and Gibraltar. As a Financial Sector Professional (PSF), Labgroup is monitored by the Luxembourg Financial Services Supervisory Authority (Commission de Surveillance du Secteur Financier, CSSF). Labgroup is ISO 9001 and ISO 27001:2005 certified and will soon acquire PSDC status.
Lab Luxembourg S.A.
2, rue Edmond Reuter