Annual report - HSE

2.5.4 Achieving information security objectives
In 2012, the implementation of information security management measures continued in
accordance with the ISO 27001 standard and included:
• updated inventory count of IT resources within individual systems at TEŠ and HSE;
• updated risk assessment for all IT resources, paper documents, services (contracts) and
people;
• amended procedures for the monitoring of events in the area of information security
and business IT were prepared, as were the methods for their classification based on
changes, possible incidents and actual incidents, and for their appropriate allocation and
resolution;
• revised system management rules of procedure;
• a revised SP 30-41 Business IT procedure in accordance with organisational changes;
• a review (in accordance with the personal data protection act) of all data-bases, where
HSE processes personal data, which are reported as data-base catalogues to the
Information Commissioner as required by the law.
We also performed an external assessment according to the criteria of ISO/IEC 27001:2005.
2.5.5 Family-friendly company
The HSE company was issued the certificate on 10 May 2010. After the acquisition, the
Managing Director of the company appointed a team for coordination of professional
and family life, which continues to work on the certificate in accordance with measures.
Most of adopted measures is carried out adequately. For some of them, protocols have
been prepared and approved. A research among employees is carried out every year.
On 6 September 2012, the second annual visit by an external consultant took place
in connection with the HSE annual report on performance of measures for obtaining
complete Family-Friendly Company certificate. The company DEM also holds the Family-
Friendly Company certificate.
2.5.6 Certificates obtained by the HSE Group
production companies
Annual Report HSE 2012
2 Business Report
52
HSE DEM SENG HESS TEŠ TET PV HSE Invest
ISO 9001 • • • • • • •
ISO 14001 • • • • • •
OHSAS 18001 • • • • • • •
ISO 27001 • • • •
ISO 50001
ISO/IEC 17025
EE TÜV • • • •
EE+ TÜV • • • •
EEnew TÜV • •
RECS • • • •
PoI • • •
DPP • •
•
HACCP • •
•
DOP • •
ISO 9001: Quality management system
under the regulations of standard; ISO 14001
Environment management system under
standard requirements; OHSAS 18001:
Occupational health and safety system
under standard requirements; ISO 27001:
Information security management system
under standard requirements; ISO 50001:
Energy Management system – Requirements
with instructions; ISO/IEC 17025: General
requirements for the competence of testing
and calibration laboratories; EE TUV:
Certification assessment in accordance with
TÜV TMS criteria for electricity production
from renewable sources (CMS Standardu
83: Erzeugungb EE (04/2011)); EE+ TÜV:
Certification assessment in accordance with
TÜV TMS criteria for electricity production
from renewable sources by providing
guarantee of operations and efficiency;
Eenew TÜV: Certification assessment
in accordance with TÜV TMS criteria for
electricity production from renewable
sources – for new up to 12 years old HPPs;
RECS: Renewable Energy Certificate System
= International certification system for RES
electricity; PoI: Guarantee of origin; FFC:
Family-friendly company. HACCP: Hazard
Analysis Critical Control Point = Analysis
of critical control point risk Standard for
measuring labs; CSR: Corporate Social
Responsibility certificate.