Knowledge

By Maulana Iqbal Ruswandi, Lead Consultant IT GRC – Robere & Associates (Indonesia) 

In the contemporary business landscape, ESG (Environmental, Social, and Governance) has become a crucial aspect that organizations must consider in their operations. These three aspects are frequently utilized to measure an organization’s impact and business sustainability. 

The Importance of ESG in the Business World 

ESG aspects influence various organizational operational facets, public perception, and an organization’s market value. Below is an elaboration of the ESG aspects: 

• Environmental: Measures an organization’s impact on the environment, including waste management, resource utilization, environmental preservation, and climate change-related policies. 

• Social: Assesses a company’s interactions with employees, suppliers, customers, and authorities. The focus is on meeting expectations and needs, working conditions, health and safety, and relationships with specific interest groups. 

• Governance: Refers to leadership, auditing, internal controls, and the fulfillment of shareholder rights. It is crucial for ensuring reliability in company management, mitigating risks of performance decline and reputational damage. 

Information Security Management and ESG 

To support ESG aspects, organizations need to enhance information security management within their business operations. One international standard that can be referenced is ISO/IEC 27001:2022, which focuses on maintaining the availability, confidentiality, and integrity of information and information processing facilities. 

While its primary focus is on information security, the implementation of ISO/IEC 27001:2022 can provide positive impacts on ESG aspects: 

• Impact on Environmental: In Clause 4.1, the ISO/IEC 27001:2022 standard requires organizations to identify internal and external issues by considering climate change and environmental aspects. An example is the adoption of paperless methods for document management, which not only reduces the risk of document damage and theft but is also environmentally friendly. 

• Social Impact: This standard can enhance the protection of personal data and intellectual property rights (IPR), which are central to social responsibility. Effective data management and protection demonstrate a commitment to privacy and security, building customer trust. 

• Governance Impact: ISO/IEC 27001:2022 establishes a framework for implementing an information security management system that encompasses planning, implementation, evaluation, and follow-up. This assists organizations in implementing sound information security governance. 

Conclusion 

The implementation of ISO/IEC 27001:2022 in information security management yields significant positive impacts on ESG aspects within organizations. This implementation not only enhances the quality and added value of an organization but also ensures more sustainable and responsible operations. 

---

Discuss With Us! 

For those who wish to discuss further and explore the latest information on Information Security based on ISO/IEC 27001:2022, Robere & Associates is ready to assist. Join us now!