NGX Group retains ISO/IEC 27001:2013 certification

The Nigerian Exchange Group (NGX Group) has retained its ISO/IEC 27001:2013 certification, following the annual Information Security Management System (ISMS) audit by British Standard Institute (BSI).

In a statement it issued in Lagos on Monday, the NGX Group said that this would be the seventh consecutive year it would hold the certification which it received first in 2015.

It said the re-certification followed a thorough independent audit of NGX Group of Companies, after which BSI certified the company to be in full compliance with applicable controls developed to meet the Control Objectives of Information Security Management System (ISMS) Standards.

The NGX Group said that the re-certification implied that it upheld the principles of the International Organisation for Standardisation (ISO) on ISMS and that controls were working as intended.

“Given the changing security landscape arising from the pandemic, this re-certification validates our commitment to protecting information and digital assets at NGX Group.

“This is by ensuring that our processes are sophisticated and our digital interactions are secured through the deployment of robust cyber security controls and tools.

“Since first attaining the ISO 27001:2013 certification in August 2015, we have continued to evolve and improve our security management processes to ensure that our information security controls remain efficient, safe and effective in the light of emerging business needs,” it said.

It added it had adopted a proactive approach to security because it recognised the importance of protecting its own data and that of its stakeholders.

“With the re-certification, clients and stakeholders can be confident that we follow information security best practices in managing our cyber risk exposure in the cyber-dependent world that we have today,” it said.