The National Industrialization Company (TASNEE), announced that they have achieved the dual milestones of ISO 27001 and ISO 20000 certifications. I(TS)2, a Saudi-based specialized IT Security company, helped TASNEE develop information security policies and procedures, IT service management function and enhance the maturity of its IT and Information Security policies and processes in order to achieve these ISO certifications.
TASNEE is a company that erects, manages, operates and owns petrochemical, chemical, plastic, engineering, and metal projects and provides industrial services. The company also markets its products through five major industry sectors such as Petrochemical, Chemical, Metal, Diversified, and Services.
"ISO 27001 is well known internationally adopted standard in the world for information security,” said Mr. Abdulgader Al-Harthi, the IT Manager at TASNEE. “Information security is a major concern in today’s world and hence, TASNEE understands and recognises the need for information security. ISO 20000-1:2011 is Service Management System standard that offers lot of benefits such as allowance of operational, tactical and strategic planning; provision of core customer-focused IT services and effective use of IT; improvisation of efficiency through better alignment with business objectives; and so much more."
ISO/IEC 27001:2005 covers all types of organisations and specifies the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented Information Security Management System within the context of the organization's overall business risks. It specifies requirements for the implementation of security controls customized to the needs of individual organizations or parts thereof.
ISO/IEC 20000-1:2011 meanwhile, is a service management system (SMS) standard. It specifies requirements for the service provider to plan, establish, implement, operate, monitor, review, maintain and improve an SMS. The requirements include the design, transition, delivery and improvement of services to fulfill agreed service requirements.
"This was a strategic project for I(TS)2, as we integrated two international standards and helped TASNEE achieve certifications for ISO 27001 and ISO 20000 standards simultaneously. ISO 27001 is an information security standard and ISO 20000 is an IT service management standard. In order to achieve our goals set forward, we worked closely with TASNEE to develop and implement these two international standards within a year," explained Mr. Salman Ashraf, the Manager for Information Security Services at I(TS)2.
In order to achieve the certifications, TASNEE had to upgrade its service management system including the service desk. The certification will further improve the efficiency of the process and performance of the employees. "Implementation was smooth as it was team work and the TASNEE staff participated to make it a successful implementation. After implementation, we will provide continuous support through monitoring and improvement of the standards. We provide support on a periodic basis to make sure organisation is practicing what has been prepared and implemented. In addition, we will also provide assistance for surveillance audits," concluded Mr. Ashraf.
The National Industrialization Company (TASNEE) was established in 1405H, corresponding to 1985, as the first joint-stock industrial company fully owned by the private sector. The company pursued the path of industrialization as one of the best options for diversification of the economic base and boosting of the overall growth in Saudi Arabia. It endeavored to translate its clear vision to be a leading industrial company which is committed towards its shareholders and related parties worldwide. The secret of the Company’s strength is its wide experience and skilled-labor, state–of-the art technologies and products and innovative solutions which add value to its products and services locally and offshore.
The Company has grown to become the second largest industrial Saudi Company and the second largest producer of titanium dioxide in the world.
Headquartered in Riyadh, Saudi Arabia, I(TS)2 (i-ts2.com) is the Middle East’s premier provider of integrated security solutions, security consulting services and security training & certification curriculum and is ISO 27001:2005 certified. I(TS)² is focused on empowering all clients to combat evolving security threats. I(TS)2‘s unique approach ensures delivery of the right mix of people, processes, and technology to meet unique business needs.
I(TS)2 boasts the most prestigious regional Security Academy providing professional and international certifications. I(TS)2 is the only Platinum Consultancy Partner for BSI in Saudi Arabia and has achieved Cisco Advanced Security and Microsoft Gold Partnerships. I(TS)2 has over 130 employees in Riyadh, Eastern & Western Province as well as Jordan.
Mohammed Aljeraisy, CMO - T: +966-1-207-7008