ESA IT Quality and Security Standards
The IT Department operates within a Quality Management System (QMS) framework made of policies, procedures and instructions. For an introduction to the QMS of the IT Department, please see the link to the Quality Plan and Quality Management System Brochure. They apply to all IT activities.
The IT Department has been ISO 9001 certified since 2002. Standard best practices are used to manage projects and services. Prince2 and Agile are the Project Management best practices applied to the management of evolution activities and most of our IT Project Managers are trained to these methodologies.
ITIL is the Service management best practice applied and followed by the IT Service Providers, and our IT Service Managers are trained to ITIL. The principles of these best practices are translated into the IT Department QMS framework.
esait also operates within an Information Security Management System or ISMS. Sharing many synergies with the Quality Management System, the ISMS provides a systematic, risk-based approach to protecting data, and all IT staff are trained on ISMS policies and processes. The department was awarded the ISO 27001 certification for its ISMS in 2019.