Information security management system

Compliance of the information security management system with the requirements of the international standard ISO 27001.

KazTransOil JSC operates an information security management system that meets the requirements of the international standard ISO 27001: 2013.

In December 2007, KazTransOil JSC became the first company on the territory of the Republic of Kazakhstan, which to be successfully certified for compliance with the requirements of ISO/IEC27001:2005 module FI (Finance) of the SAP ERP system.

In 2014, the ISMS recertification audit was successfully completed. Certification serves as a confirmation of the high quality of services provided to ensure confidentiality, integrity and availability of information of KazTransOil JSC.

In August 2015, KazTransOil JSC successfully implemented the transition to ISO/IEC 27001:2013.

The policy of KazTransOil JSC in the information security sets goals, tasks and approaches to ensuring information security, which the Company follows in its activities.

The main purpose of ensuring information security is to protect the Company's information systems and assets from the impact of threats (risks).

The policy of KazTransOil JSC in the information security is applied by all structural divisions of KazTransOil JSC.

In 2020, the Company successfully conducted a certification audit of the information security management system to confirm the ISO/IEC 27001:2013 standard, following which the international certification body «TUV AUSTRIA Standards and Compliance» LLC issued a certificate of compliance №TA420203009336 dated July 29, 2020, valid until July 28, 2023.
Certificate of compliance of the information security management system with the requirements of the international standard ISO 27001:2013 (Download | View in new window)
pdf    499.2Кб    07.09.2020    8

The Company does not have any obligation to provide interested persons the documents legally translated into English or any other language. Documents posted on the website in English, are not legal translation.

Site users must use the translated documents only to get an idea about the content of the Company approved documents placed on the website in Kazakh and / or Russian.

The Company shall not be held responsible for the correctness of the findings of the person concerned as to the correctness and completeness of the translation of documents into English, as well as conclusions on the rights of the person concerned and / or obligations of the Company, made on the basis of the documents posted on the website in English.