Certrec takes threats to the availability, integrity, and confidentiality of our clients` information seriously.

As such, Certrec is an ISO/IEC 27001:2005 certified provider whose Information Security Management System (ISMS) has received third-party accreditation from the International Standards Organization.

ISO/IEC 27001:2005 is an information security management system standard published in October 2005 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

BrightLine, an independent, third-party auditor, found Certrec to have technical controls in place and formalized IT Security policies and procedures. Certrec has implemented several physical security measures and countermeasures that protect it from unauthorized access or compromise and IT personnel were found to be conscientious and knowledgeable in best practices.

Compliance with this internationally recognized standard confirms that Certrec`s security management program is comprehensive and follows leading practices. The scope of our ISO/IEC 27001:2005 certification includes:

Website Development
Website Hosting
Network Infrastructure
Network Security
Engineering Consulting
Regulatory Compliance Solutions
Training
Information Management
Safety Culture Consulting
Document Management
Information Research Operations

This certification demonstrates Certrec`s continued commitment to information security at every level and ensures you that the security of your data and information has been addressed, implemented, and properly controlled in all areas of our organization.

ICP Assessment Brochure