Prophix Achieves ISO/IEC 27001:2013 Certification

March 7, 2019

Prophix Cloud Services recognized by global standard for information security management

Prophix Software, a global leader in Corporate Performance Management (CPM) software, is pleased to announce its Prophix Cloud Services are ISO/IEC: 27001:2013 certified further demonstrating Prophix’s commitment to providing the highest standards for information security to its customers.

ISO/IEC: 27001 is a globally recognized standard and code of practices to ensure proper implementation of an Information Security Management System (ISMS). The standard provides a comprehensive framework for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving a documented ISMS within the context of the organization’s overall business risks. An ISMS is a systematic approach to managing sensitive company information so that it remains secure and encompasses people, processes, and systems by applying a risk management process.

“From the start, we have been unwavering in our commitment to delivering a leading CPM cloud product that finance and IT professionals can have total confidence in,” said Kris Laxdal, Director, Information Security, Prophix Software. “The ISO/IEC 27001:2013 certification of Prophix Cloud Services is the result of the significant investments we have made in cloud security, infrastructure, and operations.”

To achieve ISO/IEC: 27001:2013 certification, Prophix’s security and compliance was audited by a third-party independent auditor that systematically examined areas including risk management procedures, threat mitigation, data loss prevention, physical security, and continuous improvement practices.

“Prophix is committed to protecting the data of its customers around the world and has taken a comprehensive approach to information security across the organization” says Alok Ajmera, President and COO of Prophix. “Obtaining ISO/IEC 27001:2013 certification is a tremendous achievement that gives our customers confidence that security processes and controls in our cloud services follow internationally recognized standards.”