Information security management system

Compliance of the information security management system with the requirements of the international standard ISO 27001.

 «KazTransOil» JSC operates an information security management system that meets the requirements of the international standard ISO 27001:2013.

In December 2007, «KazTransOil» JSC became the first company on the territory of the Republic of Kazakhstan, which to be successfully certified for compliance with the requirements of ISO/IEC 27001:2005 module FI (Finance) of the SAP ERP system.

In 2014, the ISMS recertification audit was successfully completed. Certification serves as a confirmation of the high quality of services provided to ensure confidentiality, integrity and availability of information of «KazTransOil» JSC.

In August 2015, «KazTransOil» JSC successfully implemented the transition to ISO/IEC 27001:2013.

The policy of «KazTransOil» JSC in the information security sets goals, tasks and approaches to ensuring information security, which the Company follows in its activities.

The main purpose of ensuring information security is to protect the Company's information systems and assets from the impact of threats (risks).

In 2021, «KazTransOil» JSC successfully conducted an audit of the information security management system to confirm the ISO/IEC 27001:2013 standard, following which the international certification body, TUV AUSTRIA Standards and Compliance LLC, issued a certificate of conformity №TA420203009336 dated October 13, 2021, valid until October 12, 2024.

ISMS Certificate of compliance with the international standard ISO/IEC 27001:2013 (Download | View in new window)
pdf    834.84Кб    36

The Company does not have any obligation to provide interested persons the documents legally translated into English or any other language. Documents posted on the website in English, are not legal translation.

Site users must use the translated documents only to get an idea about the content of the Company approved documents placed on the website in Kazakh and / or Russian.

The Company shall not be held responsible for the correctness of the findings of the person concerned as to the correctness and completeness of the translation of documents into English, as well as conclusions on the rights of the person concerned and / or obligations of the Company, made on the basis of the documents posted on the website in English.