Zalsman
It's possible at Zalsman
“It’s possible at Zalsman” is the motto that captures Zalsman’s culture. Zalsman has been active as a print producer for 165 years. Zalsman offers a wide range of production techniques, IT services, and logistics solutions. Both large and small print runs can be processed on conventional offset presses or on modern digital printers, with the option for personalized printing.
Remco Glashouwer
Author
What was the challenge?
Zalsman holds various certifications, including the Information Security (ISO 27001) certification. This certification was established, implemented, and maintained by the in-house IT manager. In 2023, the IT manager left the company, and with his departure, the basic knowledge required to maintain the ISO 27001 Information Security Management System (ISMS) was lost to the company. Unfortunately, this is not a unique situation and applies to many certified companies.
As a result, the continuation of ISO 27001 certification was called into question, even though it is an important certification for many customers.
What was the approach?
The Service Center has known Zalsman for many years and supports the company on various certification matters. For ISO 27001, the role of internal auditor has already been fulfilled, and discussions have taken place regarding providing support—through (temporary) secondment—for maintaining and sustaining the ISO 27001 system (ISMS).
What are the results?
Following the departure of the IT manager, the Service Center temporarily assumed the role of ISMS coordinator. During the secondment project, a new IT manager was hired, and an active collaboration was established between the Service Center advisor, the IT manager, the QHSE coordinator, management team members, and senior management. The ISMS system has been maintained, and employees within the company are involved in continuing the ISMS. By distributing tasks among management team members and forming an ISMS team, knowledge has been more broadly embedded within the company, thereby elevating information security to a higher level. As a result, the company is less dependent on the departure of a single employee, and the continuity of the ISMS is ensured for now and for the future. The secondment of an ISMS coordinator from the Service Center has resulted in a higher level of engagement among various employees within the company. Instead of placing the coordination of the ISMS primarily with the IT manager, we as the Service Center need the involvement of employees within the company. Subsequently, two employees completed an information security training course to maintain information security as part of the ISMS team.
Director Herman Verlind:
Zalsman has made significant progress in establishing its information security management system. With information security implemented by an IT manager possessing the necessary knowledge and experience, Zalsman has succeeded in further embedding information security within the company and providing clients with the necessary advice to prevent information security risks. Thanks to this new approach, Zalsman is assured of a widely supported ISMS, and external support from the Service Center can always be easily scaled up or down as needed, depending on demand and internal capacity. This provides the organization with peace of mind and a degree of certainty regarding the continuity of the ISMS.