Questel reinforces information security commitment with ISO 27001

IP and innovation tools and technologies are vital to the efficient management of corporate IP rights. However, these systems must be maintained and assessed according to robust information security management policies if sensitive corporate and personal data is to be secured. With data security and privacy becoming critical items on the corporate agenda, IP owners and their advisors also need to be sure that their chosen software provider is doing everything it can to protect their valuable and confidential assets from the risk of a data breach, loss or cyber attack.

As the internationally recognized standard for information security management, ISO/IEC 27001 is the benchmark for data security best practices in the IP sector. But the journey to certification is long and complex, requiring considerable investment in devising systems and processes to implement information security controls. By achieving certification, Questel becomes one of the few IP software providers to have met the relevant standards.

“This achievement underscores Questel’s ongoing commitment to data security and the protection of our clients’ valuable IP assets,” said Charles Besson, Questel’s CEO. “We believe that long-term investment in both technology and security is necessary to harness the benefits of digital transformation effectively. Questel will continue to play a key role in supporting clients as they address increasing data security and privacy concerns accompanying this evolution in the industry.”

ISO/IEC 27001 certification is the latest milestone in Questel’s development roadmap for its business intelligence, asset management and innovation software. The certification is also the outcome of more than two years of in-depth work and investment at Questel, during which the company implemented more than 100 physical, operational, and technical controls and underwent extensive audits by multiple security experts.

 “Questel’s mission is to drive innovation a core tenet of which is protecting IP rights,” added Gadi Rivkin, CISO at Questel. “The data that our clients entrust to us via our software products represents some of their most valued assets. System security is essential to ensuring the confidentiality, integrity and availability of those assets and this certification allows us to offer concrete assurances to our clients that their information is secured according to the most stringent standards in the industry.”

To achieve certification to the ISO 27001 standard, Bureau Veritas Certification, the worldwide leader among certification bodies, independently audited Questel’s information security management system against the standard’s rigorous framework of controls. To maintain the certificate, a dedicated team of Questel security experts has been established to oversee the effectiveness and improvement of Questel’s information security management system.