Sharing Experience in Implementing ISO/IEC 27001:2005
2011-07-21 07:17:37
On the morning of May 18, at the Trade Union Hotel, the Ministry of Information and Communications organized a “Workshop on Implementing Quality Management Systems in Vietnamese IT Enterprises”.
Leaders of the Ministry of Information and Communications along with experts answered questions from IT enterprises
regarding the implementation of quality management systems
Attending the workshop were Deputy Minister of Information and Communications Nguyen Minh Hong, representatives of functional units under the Ministry, leaders of several IT enterprises in Vietnam, and many domestic and international experts. At the event, experts shared practical experiences in implementing quality management systems and production processes, as well as the necessary requirements for human resources and funding when deploying these systems in Vietnam. Representing Tinh Van Group, Ms. Le Phan Viet Ha – Head of Quality Management – also brought valuable insights from implementing ISO 27001 (ISMS) at Tinh Van Group.
Tinh Van Group is one of the few software companies that has simultaneously implemented three quality management systems: ISO 9001:2008, ISO/IEC 27001:2005, and CMMI Level 3. The ISO 27001:2005 certificate is an international certification for information security management systems issued by the international certification body DAS. The CMMI Level 3 certificate is an assessment of maturity in software production processes developed by the Software Engineering Institute (SEI) of the United States. Possessing all three certificates – ISO 9001:2008, ISO 27001:2005, and CMMI Level 3 – affirms that Tinh Van Group operates a top-tier quality management system, enhancing competitiveness and minimizing risks during production and project implementation.
In recent years, the domestic software and digital content industry has grown strongly. Some enterprises have enhanced their capabilities by adopting global standards such as CMMI and ISO. Holding internationally recognized certificates helps enterprises obtain a “passport” to enter the global software market, increasing business opportunities and attracting international investment. However, in reality, few enterprises have been bold enough to adopt these standards. One of the main obstacles is funding and experience.
The “Workshop on Implementing Quality Management Systems in Vietnamese IT Enterprises” is an activity within the framework of the Project to Support Enterprises in Building and Applying Production Processes According to CMMI Standards – a widely used global standard for assessing software production process maturity. This project was approved by the Prime Minister and assigned to the Ministry of Information and Communications as the investor.
It is known that in 2010, the Ministry of Information and Communications provided support to 16 enterprises, and in 2011, to 14 enterprises applying this standard.