CC1 NEWS

  • Home
  • CC1 ORGANIZATION OF AWARENESS TRAINING PROGRAM AND DESIGN OF INFORMATION SECURITY MANAGEMENT SYSTEM ACCORDING TO ISO/IEC 27001:2022

CC1 ORGANIZATION OF AWARENESS TRAINING PROGRAM AND DESIGN OF INFORMATION SECURITY MANAGEMENT SYSTEM ACCORDING TO ISO/IEC 27001:2022


On April 11-12, 2024, CC1's Internal Control and Risk Management Department coordinated with GIC Vietnam - an independent and professional ISO certification organization from the UK to organize a training program to raise awareness and design an Information Security Management System according to ISO/IEC 27001:2022 at the Corporation's Headquarters.

Overview of the training program on awareness and design of Information Security Management System according to ISO/IEC 27001:2022 standard

The training program is led by Lecturer Nguyen Hong Diep - Chief Assessor of GIC Vietnam Certification Organization with 04 main contents: Training necessary knowledge about ISO/IEC 27001:2022 and related issues of this standard; determining the scope of application of ISO/IEC 27001:2022 and processes of the Management System; presenting and analyzing the current status survey report and designing the Information Security Management System of the Corporation to comply with the requirements of ISO/IEC 27001:2022.

Lecturer Nguyen Hong Diep – Chief Evaluator, GIC Vietnam

Nowadays, businesses always have the need to secure and enhance the privacy of information in the organization. Accordingly, building and applying an effective information security management system to control information security risks is extremely necessary and important. The birth of ISO/IEC 27001 has created a framework that allows businesses to effectively implement information security management.

ISO/IEC 27001:2022, also known as ISO/IEC 27001, is a widely recognized international standard that defines best practices for implementing and managing information security for an Information Security Management System, or ISMS. Although ISO/IEC 27001:2022 is not mandatory, it is considered the optimal approach for any organization that wants to protect its critical data and comply with rapidly changing data protection laws and regulations.

This standard is widely accepted, used globally and ISO/IEC 27001 certification is implemented in 168 countries worldwide. Especially for businesses operating in the fields of health, finance, community, information technology or large-scale construction contractors.

Also within the framework of the training program, the participating Departments discussed and identified the information assets of their Departments that needed to be secured and presented effective information security methods for each Department.

Representatives of Departments of the Corporation participated in the training program.

Over the past 45 years, CC1 has been known as one of the leading enterprises in the construction sector in Vietnam. Currently, CC1 is applying ISO 9001:2015 on Quality Management System, ISO 14001:2015 on Environmental Management System and ISO on Occupational Health and Safety Management System. Applying information management and security methods is an important key to help minimize the risk of information leakage and unauthorized access, enhancing the reputation and overall performance of the enterprise.

Department representatives took souvenir photos with Lecturer, Chief Evaluation Expert Nguyen Hong Diep after the program.