ISO-27001, All Your Questions on Cyber-Security Answered

Published by    Dr Daniele Gambero | Propenomist on   September 19, 2023

In a world ruled by ones and zeros, an endless battle rage. I am talking about the digital realm where all the most treasured secrets such as passwords, personal data, digital payments, and e-wallets information, and more are constantly under siege. Attackers are from the dark side of the web, hackers who tirelessly keep trying to penetrate your defences, defeat the cyber-security in place, steal your data and often your money! Fear no longer as a white knight wielding a digital sword called ISO/IEC 27001 is ready to help, just need to ask for it!

Our daily lives are constantly and overwhelmingly populated by Wi-Fi, routers, cloud hosting, servers, modem and only God know how many more digital devices that, if unregulated and unprotected, will allow cybercriminal to create havoc, disruption of services, loss of data, and, even worst, our sweat savings. ISO/IEC 27001, originally developed and published as BS 7799-1, has been since its inception in 1995 the worldwide standard to adopt as a checklist or key to unlocking data's safety and enhance your cyber-security.

Cutting the jargon short, let us now embark on a journey to unveil, in a layperson language, the unknown entity that ISO/IEC 27001 is. You might be thinking, "Hold on, isn't this going to be as exciting as watching the 1925 movie Battleship Potemkin in one go?" Fear not and look at this as a digital adventure, a quest for knowledge and cyber-security in a realm where data-destroyer dragons roam.

Now, think about all the stories in the news about hackers breaking into big corporations or even government security agencies' systems to steal secrets and valuable information. This is scaring but seems to be at a different level as, who might be interested in a small or medium sized SME’s “secret”?

Unfortunately, hackers are massively targeting small businesses knowing how un-protected and easy preys they are! Imagine this: tomorrow when trying to access the external hard-drive or cloud server, a message will up on the screen asking a ransom to allow access, all your data on customers’ records, tenders, financial information are inside the hacked storage! What will you do?

Well, ISO/IEC 27001 is like a powerful protective cyber-security shield that all business owners should use to protect their digital data from the hi-tech villains.

The 6 Cyber-Protections Offered by ISO/IEC 27001!

Guarding Secrets

ISO/IEC 27001 helps keeping the business's digital secrets safe by guiding on where and how to manage cyber-security with locks, alarms, and security cameras on the digital "entry doors" to make sure only authorised people can access the valuable information.

Facing Cyber Monsters

Hackers and cyber attackers are like monsters from the dark side of the web. They have had and will always try to find ways to sneak into systems and steal or compromise or take control of valuable stuff. ISO/IEC 27001 provides a map of these monsters' hiding spots and helps building strong walls and defences to keep them out.

Trust-Building

When personal data and information, above all if sensitive, are shared with a company, the question arising should be: are they taking cyber-security seriously? ISO/IEC 27001 compliance and certification is like a trustworthy official confirmation: "Your data & info are safe with us."

Cyber-security as Teamwork

ISO/IEC 27001 is not just for the tech experts. It is like a team game where every member has a role to play. From the boss making important decisions to the employees following cyber-security rules, everyone works together to keep the digital fortress strong and impenetrable.

Catastrophe-proof

Imagine, unfortunately it happens, the computer system crashes, and all data are gone! That would be a disaster for the business, right? ISO/IEC 27001 helps getting ready for such eventuality and provides backup plans in case the worst happens.

Growing Securely

As the business grows and more technology is widely used, the risks also increase exponentially. ISO/IEC 27001 allows and is “designed” to grow accordingly, it is like adding more guards and walls as the fortress gets bigger, ensuring 100% business's safety as it expands.

Result is, ISO/IEC 27001 is not just some boring rulebook; it is a business's superhero guide protecting from digital and cyber threats. Whether you're a tiny SME or a giant corporation, in a world where digital dangers lurk around every corner, ISO/IEC 27001 is the trusted wingman, helping navigate the digital journey and keeping valuable information secure.

The ISO/IEC 27001 Weakness-Risk-Solution Paradigm

Let us now dive into some real-world scenarios that property and facility management companies might face while adopting digitalised solutions, along with real-life examples and how ISO/IEC 27001 can offer an helping hand.

 

Weak Point	Example	Risk	ISO/IEC 27001 Solutions
Unsecured Digital Access	PFM Company stores tenant information, rental agreements, and maintenance schedules on computers	Unauthorized person, using unsecured Wi-Fi network gains access to these sensitive files	1. Guide in setting strong passwords.  2. Ensure only authorized access to data. 3. Establish measures to detect & prevent unauthorized access.
Vulnerable Systems	Digital system to control heating, cooling, and security in a building has weak accessibility.	Hacker takes control of these systems and disrupts building's operations	1. Conduct risk assessments 2. Identification of potential vulnerabilities 3. Guide in implementing the countermeasures
Data Breaches	Tenants' personal data (names, contact, payment details) are stored in the system.	Cybercriminal breaks in and steal this data, leading to identity theft and possible legal issues	Set up of:  1.encryption for sensitive data  2.plan in case a breach happens.
Insider Threats	Employee leaving the PFM company steals important client data to the new job	Data leaks and breaches	Employees training on importance of data security & setting clear guidelines on data handling/tracking
Lack of Regular Checks	The PFM software becomes outdated.	Creates vulnerabilities that hackers can exploit.	1. Set regular cyber-security assessments and audits. 2. Check for weak spots. 3. Update your cyber defences.

 

 

In a nutshell, ISO/IEC 27001 is like a guidebook, with attached checklist, helping property and facility management companies to identify, tackle, and prevent cyber-security risks in their digitalization process.

Whether it is protecting tenant data, securing control systems, or preparing for the unexpected, ISO/IEC 27001 provides guidance and tools to ensure the digital side of property and facility management operations are safe, secure, and resilient.

7 Unfair Advantages of Using an ISO/IEC 27001 Certified Digital Solution for PFM

It is a commonly shared idea that there cannot be a future without digitalisation but, how to comfortably move within all the tricks and traps set up by the dark-web’s culprits? The Property and Facility Management ecosystem, because of its “business nature” and related playground, could be easily prey of cyber-criminal, the above states it quite clearly!

Let us break down and analyse in simple terms the advantages of using an all-in-one fully integrated digital platform for PFM that is ISO/IEC 27001 certified.

#1 - Streamlined Operations

Having an all-in-one platform means having everything needed in one place. Tenant information, maintenance requests, schedules, security, equipment data and control, and more can be managed without jumping between different systems.

#2 - Enhanced Efficiency

Integration spells time saving! Information can be instantly accessed, real-time tracking progress, and easy and fast communication with your team without searching through piles of paperwork or jumping on multiple software programs. It is like having a super-fast navigation system guiding the users through their tasks.

#3 – Data-based Decision-Making Processes

With all data connected and stored in the system, looking at the big picture becomes easy and intuitive. Trends and recurrencies can be spotted easily, opportunities for improvement seen clearly, and informed decisions to optimize the PFM performance made instantaneously! A PFM crystal ball that helps predicting what is next.

#4 – The Next Level of Communication

An integrated platform facilitates seamless team communications. Messages, documents, and request for collaboration are generated in real-time in one place!

# 5 – Cyber-Security Made Real

Now, here comes the ISO/IEC 27001 certification part. Imagine that the chosen digital platform comes with a “special superhero cape” protecting your system, your data, and your access. Being an ISO/IEC 27001 certified platform means it follows and fully adopt the highest standards for information security. It is like having a fortress-firewall around the PFM business, guarding, and protecting it against cyber threats, unauthorized access, and the consequent data tampering, leak of personal information or, even worst, loss of money!

#6 – Tenants’ and Users’ Trust-Building

When the clients of a PFM Company know that the managed building uses an ISO/IEC 27001 certified digital platform, it will be like saying, "Hey, we take your data seriously and we've got the credentials to prove it." This builds a priceless trust and confidence in the services provided and the PFM Company will be looked at as a highly reputable business having five starts reviews.

#7 – Be Future-Ready

An integrated digital platform that's ISO/IEC 27001 certified is equipped to handle tomorrow’s challenges. While technology evolves and security threats adapt, an ISO Certified digital solution is designed to follow suit with a resulting 24/7 data safety. It's like having a car that is not just built for today's roads, but for the highways of the future.

In conclusion, using an all-in-one fully integrated digital platform for property and facility management that's ISO/IEC 27001 certified is like having a smart, secure, and efficient command centre for all property management tasks. It makes the daily work smoother, decisions-making smarter, and most importantly, and data safer while building trust with your clients and keeping the business ready for whatever the future holds.

ServeDeck has been recently certified as an ISO/IEC 27001 compliant digital solution, not an easy task to achieve! We are proud of our achievement and invite all our current clients and all the PFM Companies still undecided on which solution to adopt or concerned about data security to reach out to our team here for a free demo on the cyber-security features implemented.

 

ABOUT THE AUTHOR

The opinions expressed in this article are solely of the author, Dr Daniele Gambero.

Dr Gambero has been an expatriate to Malaysia from Italy, since 1998 and has more than 35 years of real estate experience. He is the co-founder and group CEO of REI Group of Companies, the Co-founder of Propenomy.com and the president of the Malaysia Proptech Association.

In the past 10 years Daniele, as international and TEDX speaker, has engaged several hundreds thousand people talking about Property, Economy, Propenomy, Digital Marketing and Motivation. He is also a bestselling author and columnist on several magazines and main stream media. You can reach him directly through his LinkedIn page here.

SHARE THIS POST:

Back to Blog