Andersen in Nigeria Enhances Trust Through ISO/IEC 27001:2022

Andersen in Nigeria has successfully achieved ISO/IEC 27001:2022 certification from an IAS-accredited certification body. This achievement reflects the organisation’s commitment to maintaining a robust information security framework while delivering professional advisory and technology-enabled solutions. 

Heartiest congratulations to Andersen in Nigeria on taking a step forward towards an Information Security Management System (ISMS). It further highlights its emphasis on structured processes, client confidence, regulatory compliance, and continual improvement across its operations. By embedding an Information Security Management System (ISMS) into its business processes, Andersen in Nigeria demonstrates its dedication to safeguarding information and managing security risks effectively.

About ISO/IEC 27001:2022

ISO/IEC 27001 strengthens an organisation’s management system by embedding information security into everyday operations. It protects sensitive data, reduces cyber risks, and supports regulatory compliance while minimising legal and financial exposure. The standard improves process control, accountability, and risk-based decision-making across departments. It also helps build customer and stakeholder trust, enhances organisational credibility, and supports business continuity.

Scope of Certification

The Information Security Management System of Andersen Nigeria covers the provision of professional services including Tax, Corporate and Commercial Advisory, Regulatory and Data Protection Services, and Technology-enabled Solutions such as e-invoicing platforms, Transfer Pricing, and Business Advisory Services, delivered through its Practice Groups and supported by the Practice Management Group, across its Lagos and Abuja offices.

Benefits of ISO/IEC 27001:2022 for Andersen in Nigeria

ISO/IEC 27001, through its clauses 4 to 10, helps reduce information security risks while supporting regulatory compliance and minimising legal and financial exposure. Some of the key advantages of implementing the standard include:

• Andersen in Nigeria can protect sensitive client information, business records, financial data, and intellectual property through a structured information security framework.
• ISO/IEC 27001 strengthens client confidence and stakeholder trust by demonstrating the organisation’s commitment to internationally recognised information security practices.
• The standard helps Andersen in Nigeria identify, assess, and manage information security risks, reducing the likelihood of security incidents and minimising their impact on business operations.
• ISO/IEC 27001 supports compliance with legal, regulatory, and contractual requirements related to information security and data protection, which is particularly important for advisory and technology-enabled services.
• The implementation of an ISMS improves operational resilience and business continuity by ensuring that critical information assets remain secure and available when needed.

Other Standards That Can Be Opted for by Andersen in Nigeria

Andersen in Nigeria can further strengthen its information governance framework through the adoption of ISO/IEC 27701:2019 for Privacy Information Management and ISO 22301:2019 for Business Continuity Management. These standards complement ISO/IEC 27001 by enhancing privacy protection and organisational resilience.

About SIS Certifications

Established in 2013, SIS Certifications is accredited by both International Accreditation Service (IAS) and the United Accreditation Foundation (UAF). The leading certification body provides management system certifications for several international standards, including ISO 9001, ISO 14001, ISO 22301, ISO 21001, ISO 37001, ISO 41001, and ISO 45001. Headquartered in India, SIS Certifications has a presence in more than 55 countries and offices across multiple regions worldwide.

Other certifications include ISO 13485, ISO 22000, and ISO/IEC 27001, along with professional training programmes. SIS Certifications also provides professional training programmes, including Lead Auditor, Lead Implementer, and Internal Auditor courses. These programmes are powered by the internationally recognised training provider, Exemplar Global.