Cybersicherheit @Emons (EN)

Reliable information security along the entire supply chain

The Emons Group sees cybersecurity as an integral part of responsible corporate governance. At the center is our information security management system (ISMS), which is implemented across the Group for Emons Services GmbH and according to ISO/IEC 27001:2022 certified is. We thus ensure that information, IT systems and digital processes are systematically protected using the latest technology, that risks against our systems and processes are managed and that security measures are continuously improved for an appropriate effect.

Responsibility for information security at Emons therefore remains at management level. The Chief Information Security Officer (CISO) by Emons reports directly to Chief Financial Officer (CFO). Information security is thus firmly integrated into governance, risk management, and strategic decisions.

Our mission since 1928: safety, reliability and transparency

As an internationally active logistics company, we are unique Responsibility towards customers, partners and suppliers consciously. At Emons, cyber security not only serves to protect our own systems, but in particular to ensure the stability and trustworthiness of joint business processes. Our ISMS follows established international and national standards, in particular ISO/IEC 27001. We comply legal, regulatory, regulatory and contractual requirements. Our goal is to ensure a uniform, verifiable and verifiable level of security — reliably and transparently. To this end, we work with the recommendations from standards and best practices from the Federal Office for Information Security (BSI), the European Union Agency for Cyber Security (ENISA) and other international institutions with a focus on cybersecurity.

Information security in partner and supplier relationships

Requirements for suppliers and service providers

Die Security in service and supplier relationships is an integral part of Emons' ISMS. The basis is risk-based assessments taking into account international and national standards and legal requirements.

Emons suppliers are therefore required to:

• Ensure compliance with legal requirements (including GDPR, DSA) and contractually agreed security requirements,
• to transparently name all parties involved in the provision of services along the supply chain,
• appropriate technical and organizational measures to protect against loss, manipulation and unauthorized access to evidence of information,
• to disclose operational, authorization, data backup and recovery concepts,
• demonstrate a high level of information security (e.g. ISO/IEC 27001, BSI C5, Common Criteria or comparable evidence),
• upon request, to prove compliance with specific requirements of the EMONS-ISMS through self-declaration or audit evidence.
• Before disclosing confidential or personal information, a confidentiality agreement (NDA) must be concluded on a regular basis.

Suppliers must immediately inform Emons of over-security-related changes in the service relationship and comply with defined service level agreements (SLA). security incidents must be reported immediately to the central information security office.

Contact person in information security management

Information Security Management is available as a central point of contact for Emons customers, partners and suppliers.

Please use the form below to:- Inquiries about information security management- Questions about ISO/IEC 27001 certification- Reports of security incidents or vulnerabilities- Agreements on security requirements in business relationships

• Information security management inquiries
• Questions about ISO/IEC 27001 certification
• Reports of security incidents or vulnerabilities
• Agreements on security requirements in business relationships
  

Compliance and continuous improvement with proof

The effectiveness of our ISMS is ensured by:- regular internal audits- external certification and monitoring audits- Management reviewsensured. Findings from internal and external reviews, regular internal controls and comprehensive risk analyses are systematically incorporated into improvement measures. The ISMS DeRemons Services GmbH is certified in accordance with ISO/IEC 27001:2022. The certification was confirmed and regularly monitored by TÜV Rheinland Cert GmbH.Emons — Securely connected. Digitally too.

• regular internal audits
• external certification and monitoring audits
• Management reviews

ensured. Findings from internal and external reviews, regular internal controls and comprehensive risk analyses are systematically incorporated into improvement measures. The ISMS DeRemons Services GmbH is certified in accordance with ISO/IEC 27001:2022. The certification was confirmed and regularly monitored by TÜV Rheinland Cert GmbH.

Emons — Securely connected. Digitally too.