June 01, 2005: Commercial vehicle major and Hinduja Group flagship, Ashok Leyland, has become the first auto manufacturer in India to receive the world-renowned BS7799 certification for its Information Security Management System (ISMS). Ashok Leyland’s Data Center at Ennore (EDC) – the system headquarters of the Company – has been certified by Standardization Testing & Quality Certification (STQC) Directorate, a globally recognized certifying authority of the Government of India, under the Ministry of Information Technology. At a function held here today, Dr S L Sarnot, Director General, STQC Directorate, Ministry of Communication & Information Technology, handed over the certificate to Mr R Seshasayee, Managing Director, Ashok Leyland.
“Information is an asset, which like other important business assets, adds value to an organisation and consequently needs to be suitably protected. In line with Ashok Leyland’s tradition of embracing best practices, we went in for this certification, otherwise not a pre-requisite for a manufacturing company”, said Mr Seshasayee. “Apart from identifying and minimising security threats, the certification is a tremendous credibility and confidence booster to our global partners and stakeholders”, he added.
N Mohanakrishnan, SD-Information Technology and Knowledge Management, Ashok Leyland said that the BS7799-2:2002 certification compliance recognises the organization’s defined security policy, risk assessment and risk treatment plan, selection of controls for identified risks and audit (including technical reviews like ethical hacking, vulnerability assessment, network review). BS 7799 is a standard specified for ISMS, which allows senior management to monitor and control information security, minimize residual business risk and ensure that security continues to fulfill corporate, customer and legal requirements. It forms an integral part of an organization’s internal control. Already, international tender invitations are starting to require BS 7799 compliance.
Ashok Leyland embarked on this initiative in November 2004 and the certification was cleared in the very first review. It is significant to note that this was achieved entirely with in-house talent and expertise, with guidance and training by STQC. The Company now plans to expand the scope of the certification to other locations on a modular basis, spread over a period of 2-3 years.
Article Viewed : 286