ISO/IEC 27001:2022 certified
itm8 operates in accordance with the Information Security Management System for ISO/IEC 27001:2022 standard.
What does the ISO 27001 certificate mean?
With our recent re-certification, itm8 has taken the step from ISO/IEC 27001:2013 to ISO/IEC 27001:2022, placing us at the forefront globally as one of the first companies to be certified under the latest standard.
ISO 27001 represents an internationally recognised standard for information security that sets strict requirements for how we organise, take responsibility, implement, maintain and continuously improve our information security.
At itm8, we have integrated the ISO 27001 standard throughout our organisation and in our data centres. We regularly conduct risk assessments and internal audits to ensure that our management system and procedures are functioning optimally and effectively.
ISAE 3402 Audit report
Impartial assurance of the information security of your IT operations.
At itm8, we can present an ISAE 3402 audit statement, which serves as credible proof that we have complete control over our operations, self-control, security measures, competences, business processes and financial stability.
Annual external evaluation
This statement involves a thorough testing of the controls specified in the statement. These tests are performed annually by an independent and state-authorised IT auditor.
This external auditor conducts an annual evaluation and then prepares our statement of assurance. When our data centre is reviewed, the auditor examines our network, monitoring systems, fire and water damage protection, power outages, access security and backup solutions, among other things.
ISAE 3000 Audit report
At itm8, we have a thorough audit report in line with the ISAE-3000 standards prepared by an independent audit firm.
This statement is your guarantee that we have established effective procedures and control mechanisms to ensure the protection of personal data and that we process data attributable to individuals in accordance with our data processing agreement.
