Convey meets ISO 27001

Convey Compliance Systems Inc., a leading technology-enabled outsourcing provider, is proud to announce its registration to ISO 27001 for its information security management system.

One of many standards published by the International Standards Organization, 27001 compliance guides an organization to design, implement and maintain a process system for information security management.  ISO 27001 ensures the confidentiality, access, and security of data while addressing and minimizing risk.

Convey started in 1986 as a shrink wrapped 1099 software solution. In 2001, Convey began making a transition to a services model of information reporting. Since then the company has put a serious premium on standardizing, refining and optimizing its processes. The 27001 registration shows customers the extent of that commitment; they can rest assured that Convey adheres to the strictest industry security standards.

“This ISO certification is another milestone on our continuing journey towards operational excellence,” said Brian Provost, President and CEO. “We are dedicated to meeting and exceeding best practices in all aspects of our operations.”

Blake Bristow, head of information technology for Convey, agreed. “It helps us assess our entire system from a proactive standpoint where we are not only reacting to current issues, but also finding possible threats before they arise,” said Bristow. “In doing so, we’re forced to analyze every aspect of our processes and continually look for possibilities for increasing efficiency.”

After a six month process of research and documentation in collaboration with Orange Parachute, a Minneapolis-based company specializing in Information Security Management Systems, Convey’s organizational, technical and procedural controls to manage and secure customer data were audited and registered as compliant with the rigorous standards set out by the ISO. According to the ISMS International User Group, Convey is now in an elite group of less than 60 organizations in the United States.

“We are very ideally suited to work with companies like Convey that offer a service or product that require secure transactions and data privacy,” said Kim Sassaman, Orange Parachute’s managing director. “A certified ISMS framework also assures customers that legal and regulatory obligations are met and that the confidentiality, integrity, and availability of their information is being managed.”

Although ISO registration is an accomplishment and milestone for any company, it is only the beginning of an ongoing process of ensuring data security. Convey plans to maintain ISO registration by completing annual audits of ISO 27001 standards, in addition to fully reregistering every three years.

For more information on this topic or to schedule an interview, please call Jeff Cronin at 763-235-5764 or e-mail jcronin@convey.com.