UAE Awqaf obtains ISO 27001 certification

The General Authority of Islamic Affairs & Endowments, UAE (Awqaf) has been awarded the ISO 27001 certification in Corporate Information Security Management. Awqaf's IT department has also conducted a campaign throughout Awqaf targeting all staff in order to familiarise them with the significance of information security in carrying out their work.

Information security policies identifying the responsibilities of each and every individual have been published on several visual and email platforms in line with Awqaf's interest in establishing and implementing an integrated information security system that protects all aspects of information use at all levels, including data storage and communication. This covers Awqaf's commitment to protecting its available information, securing its credibility, and increasing the confidence of interested stakeholders in its capacity as a significant mediator of information security with other organisations.

Awqaf was certified by a committee of specialised and accredited experts after rigorous security testing and auditing against potential risks. Awqaf attained this certification through its design of an advanced system to avert and confront all potential risks and damages. Several regulations were introduced to counter potential effects on data.

HE Dr al Kaabi said, "We would like to thank the Information Security Department team for their efforts and cooperation in attaining this certificate. The awarding of ISO 27001 certificate to Awqaf in Information Security Management systems shall boost confidence in the social services we provide by maintaining data and strengthening information security and our response to any potential risks. We have established a world-class security system in Awqaf to protect information in various organisational units. The effective application of ISO 27001 shall provide our senior management with the capacity to control and monitor information security, and minimise the danger of unlicensed entities losing, leaking, or even tampering with such data."