--- title: "The Pragma Group celebrates ISO 27001 certification" description: "Achieving ISO 27001 certification is no small feat for any organisation. At Pragma it took two years, significant financial investment and a massive" image: http://pragmaworldnet.k53rpra8ca-pj68e8dzp6l2.p.temp-site.link/wp-content/uploads/ISO-27001.jpg canonical: https://www.pragmaworld.net/pragma-celebrates-iso-27001-certification/ url: https://pragma-world.getmd.ai/pragma-celebrates-iso-27001-certification/.md last_converted: 2026-10-06T15:21:36.933Z --- # The Pragma Group celebrates ISO 27001 certification August 17, 2022 Achieving ISO 27001 certification is no small feat for any organisation. At Pragma it took two years, significant financial investment and a massive company-wide effort – well worth it for the value that the certification will add to the company and its clients. Pragma is now celebrating this recent achievement and joins a group of approximately 200 South Africa businesses that have also successfully been certified. Darryl Lampert, Pragma’s Chief Information Officer, explains that in simple terms, ISO 27001 certification is an international standard for managing information security. Certification is voluntary, and it requires organisations to take a risk-based approach to how they manage all data, particularly sensitive data. The requirements are rigorous, and the outcome is a collection of controls that ensure security practices of a high standard. While ISO 27001 certification is not a requirement for POPIA and GDPR compliance, it displays to the regulators that a company has an Information Security Management System (ISMS) in place. In addition, many of the requirements for ISO 27001, POPIA and GDPR overlap. “By becoming certified, we are meeting internationally recognised requirements to control and minimise our IT risks,” says Darryl, “and we are providing significant evidence to our staff, clients, contractors and the information regulators in the EU and SA that we take cybersecurity risk and  management very seriously.” The effects of cybercrime on a company’s brand reputation and financial stability can be devastating. In March 2022, a local credit reporting agency was held to ransom by a hacker group demanding $15 million (R225 million) for over four terabytes of compromised data1. In May 2022, one of South Africa’s leading pharmacy retailers was the victim of a cyberattack in which their third-party service provider was hacked, leading to the personal details of more than three million clients being compromised2. “Cybercrime is a harsh reality, and so we didn’t want to approach certification indifferently as a clinical tick-box exercise simply to make our company look safe,” says Darryl. “We were intentionally seeking the real benefits of certification for our cybersecurity, mainly improving our overall cybersecurity posture.” Achieving certification was very much a team effort. “We are indebted to external consultant Alistair Corder from Apliso for his expertise and support every step of the way. Leon Swart from Sancert and his team provided valuable guidance prior to the certification audit. Internally, there was a combined effort from ICT, R&D Support and Development, HR and Finance. It’s important to be aware that managing information security in a company isn’t the sole responsibility of ICT – it needs to be part of the company culture,” says Darryl. Being ISO 27001 certified does not prevent a company from being hacked. No company is safe from this, no matter what measures they have in place and how much money they spend. “What certification does do is give our clients the peace of mind that we take our cybersecurity very seriously and have the systems in place to address our risks in an internationally recognised way. Cybersecurity is a journey and not a destination,” Darryl concludes. 1. https://businesstech.co.za/news/cloud-hosting/569658/transunion-cyber-attack-hackers-demand-r225-million-ransom/ accessed 4 August 2022 2. https://www.itweb.co.za/content/PmxVE7KEABOqQY85 accessed 4 August 2022 ##### Subscribe to our newsletter ##### Tags Cyber Security ISO 27001 Risk Management ##### More content ##### AI in maintenance: from CMMS records to better decisions Author | Henk Wynjeterp - Regional Lead – Europe AI is giving maintenance teams new ways to extract, structure and interpret information. But the... ##### Asset Management Masterclass or Awareness Training? Start with the role, not the course Author | Karen Greyling - Business Development Manager, Pragma I get asked this question quite often: Should I do the Asset Management Masterclass, or... ##### The lonely learner problem: why self-paced learning still needs people Author | Karen Greyling - Business Development Manager, Pragma Self-paced learning has solved a very real problem for busy adults. It gives people more... ##### Pragma appoints Stephan Kornelius as Chief Executive Officer Author | Pragma Experienced Pragma executive takes the helm on 1 October as the business continues its next... ##### No time for training? Look at what is taking the time. Author | Karen Greyling - Business Development Manager, Pragma “Not now. The team is too busy.” It is one of the most understandable reasons... ##### When Finance and Operations agree on spares Author | Pragma MRO spares are often the source of a familiar business tension. Finance wants to reduce... ##### You don’t train for a marathon by running a marathon Author | Tim Beavon - Partner Consultant, Pragma Why shutdown readiness depends on applying lessons before the next major event A major shutdown... ##### Pragma announces leadership transition and continues strategic momentum Author | Pragma Pragma has announced an important leadership transition as the business continues to build on... ##### Are we solving the wrong training problem? Author | Karen Greyling - Academy Business Development Manager, Pragma When organisations say they need training, they may already be solving the wrong training problem:... ##### The art of balancing work order feedback with compliance, learning, and wrench time Author | Scheepers Schoeman - Senior Associate, Professional Services Most organisations don’t choose their work order feedback culture. They drift into it. A new... ##### Why a qualified maintenance planner changes more than maintenance Author | Karen Greyling - Academy Business Development Manager, Pragma In many plants, the same pattern repeats itself. Work arrives late. Materials are chased at... ##### Why MRO inventory is different from other inventory classes Author | Andre Jordaan - Partner Consultant, Pragma MRO inventory differs from other inventory classes because demand is irregular, the consequences of stockouts... ##### How failing water infrastructure is quietly reshaping South Africa’s cities Author | Nelson Broden – Business Lead Pragma Managed Services On the school run through... ##### From dead capital to operational certainty: Smarter spare parts management Author: André Jordaan, Partner Consultant, Pragma Most MRO stores aren’t short of parts; they’re short... ##### Asset Management Awareness Training that fits real work Author | Karen Greyling, Business Development Manager If you’ve ever thought, “We don’t need another... ##### Asset Management Masterclass: Strategic training for leaders driving performance, reliability and results Author | Karen Greyling – Business Development Manager In asset-intensive industries, leaders are under growing... ##### Beyond compliance: Why repeated maturity assessments define asset performance leadership Author | Stephan Kornelius – Pragma Professional Services Business Lead In asset-intensive industries, leaders face... ##### OEMs need a connected platform for services Author | Henk Wynjeterp – Regional Lead – Europe | Henk leads Pragma’s OEM after-sales... ##### When rivers cry out: How asset management can help heal South Africa’s waterways Author | Nelson Broden – Business Lead Pragma Managed Services The Hennops River, once part... ##### Ditch the buzzword: OEM after-sales leaders buy execution, not “servitization” Author | Henk Wynjeterp – Regional Lead – Europe | Henk leads Pragma’s OEM after-sales... ##### Beyond the software – embedding your EAMS into your organisation’s DNA for sustainable value The key to a successful EAMS (Enterprise Asset Management System) implementation lies in integrating the... ##### Pragma’s perspective on what the proposed South African budget means for infrastructure governance Author | Stephan Kornelius Author | Stephan Kornelius – Pragma Professional Services Business Lead Finance Minister Enoch Godongwana’s 2025... ##### Government infrastructure investments must go beyond bricks and mortar – A global perspective Author | Bani Kgosana Author | Bani Kgosana Across the globe, ageing infrastructure threatens economic stability. In the US,... ##### Pragma partners with Q36.5 Pro Cycling Team to power maintenance excellence Author | Liza Schroeder Pragma is proud to announce its support of the Q36.5 Pro... ##### Revitalising South Africa – a better path to infrastructure renewal Author | Bani Kgosana, Pragma CRO South Africa faces an extraordinary opportunity to transform its... ##### Transforming maintenance from a grudge purchase to a strategic investment Author | Scott Gibson, Pragma CEO  With South Africans enjoying a break from load shedding... ##### Pragma 2.0 – CEO of Pragma, Scott Gibson’s vision is to compete with international giants through engineering excellence At Pragma, our roots are deeply embedded in engineering consulting. We are proud to be... ##### Are you proactively shaping your focused improvement process or is it evolving organically? Author | André Jordaan, Pragma Partner Consultant Focused improvement (FI) is the overarching process used... ##### Introducing Pragma’s Enhanced Asset Management Assessment Framework: AMIP Physical assets must be managed effectively for a business to grow and be competitive. Across... ##### Unlocking Asset Management Excellence: Pragma’s Spotlight at the SAAMA Conference, 5-6 June 2024 As anticipation builds for the upcoming South African Asset Management Association (SAAMA) Conference, Pragma is...