Chennai: Commercial vehicles major and Hinduja Group flagship, Ashok Leyland, has become the first auto manufacturer in India to receive the BS7799 certification for its 'information security management system' (ISMS).

Its data centre at Ennore (EDC) in Chennai has been certified by the Standardisation Testing and Quality Certification (STQC) directorate, a globally recognised certifying authority under the. ministry of information technology. STQC is the first accredited BS7799 ISMS certification body in India that offers certification services under accreditation from RvA, Netherlands.

BS7799 is a standard specified for ISMS, which allows senior management to monitor and control information security, minimize residual business risk and ensure that security continues to fulfill corporate, customer and legal requirements. It forms an integral part of an organisation's internal control. Already, international tender invitations are starting to require BS7799 compliance.

Says R Seshasayee, managing director, Ashok Leyland, "Information is an asset, which like other important business assets adds value to an organisation and consequently needs to be suitably protected. In line with Ashok Leyland's tradition of embracing best practices, we went in for this certification, though it is not a pre-requisite for a manufacturing company."

In 1993, the company became the first automobile manufacturer in India to receive the ISO 9002 certification, followed by the more comprehensive ISO 9001 and the QS 9000 certification.

Ashok Leyland embarked on its BS7799 initiative in November 2004 and the certification was cleared in the very first review. It is significant to note that this was achieved entirely with in-house talent and expertise, with guidance and training by STQC. The company now plans to expand the scope of the certification to other locations on a modular basis, spread over a period of two or three years.

N Mohanakrishnan, SD-information technology and knowledge management, Ashok Leyland said that the BS7799-2:2002 certification compliance recognises the organisation's defined security policy, risk assessment and risk treatment plan, selection of controls for identified risks and audit (including technical reviews like ethical hacking, vulnerability assessment, network review).

The company is the second largest manufacturer of commercial vehicles in India. In May 2005, it sold 4,655 vehicles, an increase of 750 vehicles than in May 2004. For the two months April and May, 2005, its total sales were 8,077 against a production of 9,441 units.