The National Pension Commission has received international endorsement for its Information Security Management System (ISMS), placing it on the pedestal of adherence to global protocols as a pension regulator.
PenCom new record provides a systemic approach to effectively manage the risks associated with an organization’s information assets by using well defined processes, technology and people.
The ISMS of the National Pension Commission was designed to achieve the ISO 27001:2013 standard, which is an internationally recognized set of information security standards that govern the security of information assets such as intellectual property, financial information, employee information, as well as information entrusted by third parties.
The standards are published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The Commission had been evaluated by the Professional Evaluation and Certification Board (PECB) in all core areas of its operations and its ISMS was certified to be in compliance with the ISO 27001:2013 standard in all the core areas of its operations.
PenCom statement said the certificate of compliance was issued to the Commission on 8 January 2021. The Commission which regulates the pension industry and custodian of National Databank on pension matters in the country, said this certification is an important demonstration of the Commission’s commitment to the highest standards of confidentiality, integrity and availability of data on contributors, retirees and stakeholders in the pension industry.
The Commission also stated that this is an affirmation that it had put in place, business controls and management processes to safeguard its information assets from threats and vulnerabilities.
It further recognized the Commission’s implementation of an effective information security system that complies with one of the most stringent international standards in the identification, evaluation and effective management of the risks associated with its information
assets.
