The ISMS project kick-off meeting was successfully conducted on 29 May 2026, with active participation from key stakeholders and process owners. The session focused on building alignment across departments, understanding the certification roadmap, and initiating function-wise action items required for the validation journey.

A Step Towards Stronger Information Security

As organizations continue to operate in increasingly data-driven and digitally connected environments, information security is no longer just an internal function — it is a critical foundation for trust, compliance, and operational resilience.

Through this validation process, Y-Capita aims to establish, implement, and strengthen structured information security practices across key business functions.

Key Functions Covered Under the ISMS Scope

During the kick-off meeting, the following functions were identified as part of the ISMS scope:

• Top Management

• HR & Administration, including Company Legal

• SCM: Purchase, Stores, and Despatch

• IT – System Administration

• Business Development

• Technical: Product Regulatory, Design, Planning, Production, and Machine Maintenance

• EHS / Safety

Function-Wise Action Areas

The meeting also outlined action items across departments to support the certification process.

HR

Focus areas include induction training, annual training planning, and employee screening or background verification.

Administration

Action areas include ensuring adequate CCTV coverage, CCTV monitoring at reception, and secure storage for confidential hard copy documents.

SCM

The SCM function will work on maintaining supplier lists with defined scopes of supply or service, along with agreement and NDA templates.

Legal

The legal function will document applicable legal requirements, including company registrations.

EHS / Safety

Safety-related action areas include fire alarm systems, trained fire fighters and first aiders, unobstructed fire extinguishers, and secondary emergency exits.

IT

IT-related focus areas include CCTV footage backup for a minimum of 30 days, network diagrams, IT asset lists, software license lists, server room readiness, and secondary server setup planning.

Business Development

Business Development will work on categorizing customer information and organizational information handled within the business.

Moving Ahead

The ISO/IEC 27001 validation process marks a significant step in Y-Capita’s journey toward building stronger internal systems, safer information handling practices, and greater operational maturity.

Y-Capita will continue working closely with the respective teams and stakeholders in the upcoming phases to support the establishment and strengthening of its Information Security Management System.