Leeds, 22nd December 2009.

CSI Ltd is proud to announce a major achievement in gaining certification to the ISO/IEC 27001:2005 standard for information security management.

Early in 2009 the business took a decision to invest in a project to build an ISO standard compliant Information Security Management System (ISMS) that would satisfy three core objectives: To provide an effective system for managing information on behalf of others; to ensure best practice and consistency throughout the organisation in managing information, and to demonstrate to customers, in a verified and industry recognised manner, that their information is protected within CSI, in turn helping them to meet demands for regulatory compliance and governance relating to information security.

Andy Forsyth, CSI's Managing Director , commented: I am very pleased that we have achieved this certification. We have always taken our responsibilities for securing sensitive information seriously, especially where customer data is concerned. Andy continues Becoming an ISO 27001 certified organisation is a major endorsement of our procedures and clearly demonstrates CSI's ongoing commitment in this area, as well as positioning CSI as a compliant supplier to aid customers in meeting the challenge of increasing governance in information security.

Mark Goodge, CSI's Quality Manager and project manager for the ISMS implementation project commented: CSI have been ISO 9001 certified for many years so we are very used to a process and quality driven environment. Nonetheless this was a major undertaking and achieving certification in under a year is testament to the strength of our existing working practices that were either reused or enhanced for the ISMS. It also demonstrated to me the ability and willingness of CSI people to implement the enhanced processes quickly and effectively. Certification will be of great benefit to the business and our standing amongst our competitors in a marketplace where customers are becoming increasingly conscious of the security of their information. They regularly ask us questions about how we protect information; we are now able to give a very clear answer to those questions.