Results

processCentric GmbH demonstrates a clear understanding of the requirements related to environmental protection and information security, the relevant legal, contractual, and other binding obligations, and the market conditions that influence its operations. The scope and structure of the environmental and information security management system comply with the requirements of ISO 14001 and ISO 27001.

The management of processCentric GmbH is actively committed to environmental protection and information security. It makes key decisions to ensure compliance with relevant legal, contractual, and other binding obligations, as well as to continuously improve environmental and information security performance.

Environmental and information security objectives, risks, and changes are clearly defined and documented. processCentric GmbH plans orders in a risk-aware and forward-looking manner. This minimizes environmental impacts and reduces security incidents. Customers benefit from sustainable practices and the reliable handling of sensitive information.

processCentric GmbH ensures that environmental and information security-related tasks are supported by well-trained personnel, appropriate tools, and clear communication. This helps prevent environmental impacts and security incidents, ensures employee competence in handling environmental and information security requirements, and reduces misunderstandings in the implementation of related measures.

processCentric GmbH consistently implements the requirements of environmental and information security management. Employees receive clear instructions for environmentally responsible and secure working practices. Processes are stable, and legal as well as contractual requirements are met. Information security risks are regularly assessed and effectively reduced through targeted measures, while an effective response to environmental emergencies is ensured.

processCentric GmbH regularly assesses its environmental impacts and identifies potential risks to information security, verifies compliance with relevant environmental and security requirements through internal audits, and summarizes the results in a structured management review. This ensures that environmental and security objectives are achieved, legal and contractual obligations are met, and both ecological performance and protective measures are continuously improved – to the benefit of customers, partners, and the environment.

processCentric GmbH embraces the principle of continuous improvement in environmental and information security management by continuously reviewing and purposefully enhancing relevant processes. This allows customers to rely on the responsible use of environmental resources and a high, steadily increasing level of protection for sensitive information.

processCentric GmbH has implemented comprehensive organizational measures to embed information security within the organization. These include, among others, the introduction and regular review of an information security policy, the clear definition of responsibilities, the implementation of access control procedures, as well as the classification and labeling of information. Furthermore, inventories for information and related assets are maintained, contacts with relevant authorities and stakeholder groups are upheld, and measures for information security in supplier relationships are implemented.

processCentric GmbH has implemented extensive personnel-related measures to ensure information security. These include security screenings for new employees, the definition of responsibilities in employment contracts, as well as regular training and awareness programs on information security. Furthermore, formalized procedures such as a disciplinary process, clear responsibilities when terminating or changing employment relationships, and binding confidentiality agreements are in place. In addition, rules for secure remote work have been established and a reporting procedure for information security incidents has been introduced.

processCentric GmbH has implemented comprehensive physical measures to protect information and related assets. These include, among others, secured security perimeters and access controls, the physical monitoring of premises, as well as protective measures against physical and environmental threats. In addition, rules have been established for a tidy working environment, the safe operation and placement of equipment, the protection of assets outside the premises, and the secure management of storage media. Maintenance, cabling, and the secure disposal of equipment and assets are also regulated.

processCentric GmbH has implemented a wide range of technological measures to ensure information security. These include the protection of end devices, the management of privileged access rights, the restriction of information access, and secure authentication procedures. Furthermore, technical vulnerabilities are systematically managed, data is deleted or encrypted, and logging is performed. These measures are complemented by network and application security, the use of cryptography, and protection against malware.