Certification
As an extension of the existing information security management system, Intility has worked towards becoming ISO27001 certified over the past year. The audit is now completed, and Intility has been awarded the certification. The scope of the certification covers all service deliveries from Intility and complements an already extensive assurance reporting (ISAE 3402 type 2 for information security and ISAE 3000 type 2 for compliance with GDPR requirements).
Intility's information security management system is implemented according to the controls in ISO 27001 annex A. Of these controls, only "outsourced development" is scoped out. The reason being that Intility does not use any external developers.
The certification body Scandinavian Certification AS has conducted the certification audit. The certificate was issued on April 7, and is valid until April 7, 2028.
What is ISO27001?
ISO 27001 is an international standard for information security management systems (ISMS). The standard specifies the requirements for establishing, implementing, maintaining, and continuously improving an ISMS. The goal of ISO 27001 is to systematically protect information through a risk management process. The standard covers, among other things, risk assessment processes, security policies and procedures, management involvement and reporting and security incident management.
ISO 27001 also includes requirements for documentation, internal auditing and continuous improvement. This provides a structured approach to identifying, managing, and reducing risks related to information security, and ensures that the organization meets legal and regulatory requirements.
