News
Certified for the Future! Critical Receives ISO 27001 Certification
Critical Software is pleased to announce that it has achieved ISO/IEC 27001:2013 certification.
Information security is paramount in everything we do here at Critical Software.
ISO 27001 is one of the most widely recognised and internationally accepted information security standards. It’s one of the few standards that uses a top-down, risk-based approach towards evaluation. It identifies requirements and specifications needed for a comprehensive Information Security Management System (ISMS), defining how an organisation should manage and treat information more securely, including through use of applicable security controls.
Information security is paramount in everything we do here at Critical Software. We are committed to holding ourselves to the highest standards when it comes to protecting the security of the processes, people, and technology which support all our services. We take every precaution to safeguard our information and systems so that we can focus on creating safe, reliable, and secure software in the most mission and safety-critical of industries.
Being ISO 27001 certified means that Critical Software has established a robust Information Security Management System (ISMS). Our ISMS has gone through a rigorous audit and certification process, which found us to be successful in complying with the standard.
José Costa, Chief Security Officer at Critical Software, said: “We’re extremely proud to have achieved ISO 27001 certification. It demonstrates our commitment to information security and data protection. The goal of becoming ISO27001 certified required us to mature our existing security practices. Over the past 12 months, we have implemented many new processes and controls that help us better protect information and systems against a constantly changing and complex threat landscape.”
Délio Almeida, Quality Director, elaborated: “Security in our products and services is key to our operations; it’s part of our own definition of quality and embedded in our quality policy. With this certification, we have responded to multiple customer requests and demands from the industries we work in.”
Critical Software ISO/IEC 27001:2013 certification scope covers business development, project delivery, operations, support functions and IT infrastructure services.
Check out our quality page for more information on the guidelines and regulations we abide by on every project we work on.