ISO/IEC 27001:2022 - A milestone for information security and trust

Simon Hegele is now officially certified to ISO/IEC 27001:2022. It is a significant milestone that underlines our clear commitment to information security, structured risk management and sustainable IT operations. The scope of this certification covers all operational IT operations and software development to support our core logistics processes - verified and confirmed by an independent audit by DQS GmbH.

“Information security is no longer just an IT issue - it is the foundation for trust, innovation and sustainable growth. Anyone who takes it seriously is investing in the future viability of the entire company,” says Oliver Urich, CIO of the Simon Hegele Group, underlining the importance of information security for our company.

What does ISO/IEC 27001 certification mean?

ISO/IEC 27001 is the internationally recognized standard for information security management systems (ISMS). It defines requirements for the introduction, implementation, monitoring and continuous improvement of an ISMS - with the aim of systematically protecting the confidentiality, integrity and availability of information.

For our customers, partners and employees, this certification means

• Reliability and a demonstrably high level of security when handling sensitive data.
• Transparency through clear processes and documented security measures
• Future-proofing with an ISMS that is continuously developed - also with regard to regulatory requirements such as the NIS2 directive.

The path to certification

The path to ISO/IEC 27001 certification was challenging - but rewarding. It required

• Clear governance structures
• Lived security processes
• A dedicated team that is not satisfied with the status quo

The process was accompanied by intensive training, technical measures such as M365 backups and the introduction of new security guidelines. We would like to thank our team and all our supporters for paving the way for us.

A strong signal to the market

With this certification, we are sending a strong signal to our customers, partners and employees: we take information security seriously - binding, verifiable and future-oriented.