ISO 27001

SM organization

The Dockx Rhenus Archisafe sites and the IT department have been ISO 27001 certified since July 2011. This recognizes the responsible handling of information security risks. State-of-the-art technology and procedures are used to protect sensitive data. The generally recognized state of the art is followed. The Rhenus Group's data center, which is operated by the central IT department, is the focus of the certification. All the requirements of the standard are therefore transferred to all central IT services and apply throughout Rhenus. This applies to the structure of the data center as well as, for example, the implementation of the security standards relating to the Dockx Rhenus Archisafe site connections.

An Information Security Management Organization (ISMO) was set up within the Rhenus Group as part of the ISO 27001 certification process. This organization has set itself the task of ensuring the development, communication and implementation of information security measures. Employees of Dockx Rhenus Archisafe are also represented in this organization. Current challenges relating to data and information security are discussed at regular meetings. The aim is to keep information security in the company at a consistently high level and to continuously improve it. In addition to the ISMO, quality and information security issues are driven forward by the Dockx Rhenus Archisafe QM structure. Each Dockx Rhenus Archisafe site has its own quality management and information security officer. This officer takes care of matters directly on site. The regional representatives work in close cooperation with the central ISM team.

The ISMO of the Rhenus Group has drawn up the ISMS guideline as a framework, which is binding to implement. It clarifies the roles and responsibilities of all employees with regard to information security and outlines the applicable procedures.