CSE awarded three ISO certifications
The Colombo Stock Exchange (CSE) has obtained three International
Standard Organisation (ISO) certifications, and joined the elite band of
Stock Exchanges in the world to define and certify themselves, based on
auditable international standard for Information Security (ISO 27001),
Business Continuity (ISO 22301) covering trading, registry and
depository services, and IT service management (ISO 20000).

Partner, Advisory Services, Ernst and Young (E and Y),
Arjuna Herath presents the ISO certifications to CSE, Chief
Executive Officer Rajeeva Bandaranaike. From left: Senior
Manager, Advisory Services (E and Y) Sahan Weerasinghe,
Director, Advisory Services (E and Y), Shanaka de Silva,
Partner, Advisory Services (E and Y), Arjuna Herath, Rajeeva
Bandaranaike, Chief Information Officer, CSE, Chandrakanth
Jayasinghe, Head of Information Security, CSE, Wasantha
Perera, Manager, Finance
and Administration, CSE, Kusal Nissanka. |
CSE is one of the few organisations in Sri Lanka which chose to
certify its core business on ISO 27001 and ISO 22301 and IT services on
ISO 20000. Through these ISO Certifications the CSE gives maximum
assurance to stakeholders that their information is protected by the
Exchange in the most comprehensive manner.
The certifications were issued in February 2014 after a rigorous
assessment and validation process by TUV Nord, Germany. The
certifications symbolise CSE's commitment towards continuous improvement
in securing sensitive information and business resilience to face
unforeseen disasters.
Since implementation of the project, the CSE has improved its
information security, business continuity and IT service management
significantly. As the ISO certification process provides a detailed
understanding of the entire organisation and its processes,
opportunities for improvement have been identified and implemented.
It has also helped to raise information security and business
continuity awareness and readiness among employees of CSE and has led to
the efficient management of risks related to these areas. Chief
Executive Officer, CSE, Rajeeva Bandaranaike said that achieving three
prestigious ISO certifications simultaneously is a confirmation of the
interest and commitment of CSE towards the efficient management of
information security and business risks, continuous improvement of
internal processes and technical competencies to secure data and
information within the exchange. Chief Information Officer, CSE,
Chandrakanth Jayasinghe said that the CSE initiated many technological
infrastructure upgrades recently to improve resilience and uninterrupted
delivery of IT services.
Obtaining certification in IT service management for IT services
would strengthen IT operations and deliver improved services to
stakeholders.
He said that the CSE has set up a dedicated information security
function which indicates the commitment on the part of the exchange to
strengthen information security within the CSE. |