Successful ISO 27001 recertification
“Information security is integral to every decision”
In November, DEKRA performed the annual audit for our certification under the ISO information security standard (ISO 27001). And the outcome was positive: only 6 ‘minor non-conformities’ were detected. Rectification plans for those issues have already been cleared, and the issues will be quickly resolved. SIDN has accordingly been recertified as complying with the 2022 version of the ISO 27001 information security standard.
Integral to every decision
SIDN’s CISO Ferry Stelte: “There’s more to information security than safeguarding systems. It’s also about safeguarding the confidence that our customers, partners and staff place in us. Technology changes and threats evolve, but our responsibility stays the same: identifying risks promptly, increasing resilience and developing a culture in which security is integral to every decision we take.”
Commitment to reliability and security
“Recertification is confirmation of our ongoing commitment to reliability and security,” says Loek Bakker, CTO at SIDN. “Here at SIDN, we operate a vital part of the Netherlands’ digital infrastructure, and this recognition demonstrates that our processes, our people and our technology comply with the highest international standards. I’m very proud of everyone that contributed to this achievement. It shows that awareness of the importance of security is firmly embedded in our organisation. That’s vital to our mission of delivering confidence online for everyone.”
What is ISO 27001?
ISO 27001 is an international standard published by the International Organization for Standardization (ISO), which defines how an organisation can manage its information security. The purpose of ISO 27001 is to ensure the confidentiality, integrity and availability of information within an organisation. To achieve that goal, a security process is established, leading to a continuous cycle of improvement based on risk assessment and mitigation, coupled with monitoring and reporting.
