Find your region

Avire-Logo-Group

For countries not listed, see the Global site.

Note: Some products are available only in certain regions. Contact us regarding local availability.

ISO 27001 Information Security. Why it matters for Elevators.
Article

Why ISO 27001 Certification Matters for Elevators   

Elevator emergency communication has evolved significantly in recent years. Traditional voice-only systems are increasingly being replaced or supplemented by connected technologies that support voice, video, visual communication, remote management, and other advanced capabilities.

As these systems become more connected, the conversation around system design is expanding. Reliability, accessibility, and code compliance remain essential, but information security is becoming an increasingly important consideration as well.

That is where ISO 27001 certification can make a difference.

ISO/IEC 27001 is an internationally recognized standard for information security management. It establishes requirements for identifying, assessing, and managing information security risks through a structured Information Security Management System (ISMS). 

At its core, ISO 27001 focuses on protecting three fundamental aspects of information: 

  • Confidentiality: Ensuring information is accessible only to authorized individuals and systems. 
  • Integrity: Protecting information from unauthorized or unintended modification. 
  • Availability: Ensuring information and systems are accessible when they are needed. 

Achieving ISO 27001 certification requires an independent assessment against the requirements of the standard. It demonstrates a systematic approach to managing information security risks rather than relying on individual security measures alone. 

Cybersecurity is no longer limited to computers, servers, and traditional IT infrastructure. As more building systems become connected, information security considerations extend to the technology used throughout a facility.

Connected systems can communicate across networks, transmit information, support remote access, and interact with other technology. Each connection makes it important to understand how information security risks are identified and managed. ISO 27001 provides a recognized framework for doing exactly that.

For organizations evaluating connected technology, certification can provide additional confidence that information security is being addressed through established policies, processes, risk assessments, and controls. It also provides a common standard that building owners, facility managers, consultants, contractors, and IT professionals can reference when discussing cybersecurity requirements.

Modern elevator emergency communication systems can provide significantly more functionality than a traditional emergency telephone. Depending on the system and application, today’s technology may incorporate two-way voice communication, visual messaging, video, cellular or IP connectivity, remote management, and other connected capabilities.

These advancements can improve accessibility and communication during an emergency, but they also make information security an important part of system evaluation. This can be particularly significant in facilities with stringent cybersecurity or IT requirements, including healthcare facilities, government buildings, educational institutions, corporate campuses, and other security-conscious environments.

For these applications, selecting an elevator emergency communication system may involve stakeholders beyond the elevator contractor or consultant. IT and cybersecurity teams may also need to understand how a proposed system connects, communicates, and addresses information security.

Information security should be considered alongside functionality, reliability, accessibility, and applicable code requirements when evaluating an elevator emergency communication system.

Questions to consider include:

  • Does the solution follow a recognized information security standard? 
  • Has its information security approach been independently evaluated? 
  • How are information security risks identified and managed? 
  • How is information protected from unauthorized access? 
  • What security documentation is available for review by IT or cybersecurity teams? 
  • How are security practices maintained as technology and potential threats evolve? 

Recognized certifications such as ISO 27001 can help provide greater transparency and confidence during this evaluation process. 

RATH® by AVIRE recognizes that information security is an important consideration for today’s connected elevator technology. SmartView 2 is ISO 27001 certified, giving customers the confidence of an internationally recognized information security standard when evaluating their elevator emergency communication solution.

SmartView 2 provides two-way voice and visual communication designed to support modern elevator emergency communication requirements while offering the advanced capabilities expected from today’s connected building technology.

For consultants, elevator contractors, building owners, facility managers, and IT teams, ISO 27001 certification provides another important factor to consider when selecting a system for a new installation or modernization project.

Elevator emergency communication will continue to evolve as buildings become more connected and technology advances. Code compliance, accessibility, reliability, and system performance will always be critical, but information security deserves a place alongside them when connected technology is being specified and evaluated.

By understanding standards such as ISO 27001 and asking the right security questions during system selection, project teams can make more informed decisions about the technology being introduced into their buildings.

With ISO 27001 certification, SmartView 2 brings internationally recognized information security considerations into the conversation around modern elevator emergency communication.