DigiCert has achieved ISO/IEC 27001:2022 certification for its information security management system, covering the operations and processes underpinning its global certificate authority and trust services.
The certification follows an independent audit by MSECB assessing security policies, processes, and controls across operations in 11 countries and the company’s distributed remote workforce.
DigiCert said the certification provides independent validation of its risk-based approach to information security, including identity and access controls, data protection, vulnerability management, incident response, and third-party risk.
“Trust is strongest when it can be independently verified,” Lakshmi Hanspal (pictured), DigiCert’s Chief Trust Officer, said in a statement.
“ISO 27001 certification gives our customers and partners additional assurance that the same disciplined approach to security and risk management that underpins our solutions also governs how we protect information and operate our business.”
The certification covers DigiCert operations in Australia, the US, UK, Ireland, the Netherlands, Belgium, Germany, Switzerland, Latvia, India, and South Africa.
DigiCert said the certification could help customers, particularly those in regulated industries, assess supplier security and streamline procurement and compliance reviews.
DigiCert will undergo ongoing surveillance audits and periodic recertification to demonstrate that its information security management system remains effective as threats, technologies and regulatory requirements evolve.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
