Suprema renews ISO certifications to boost data protection

Suprema has announced the renewal of its ISO/IEC 27001:2022 and ISO/IEC 27701 certifications, underscoring its ongoing efforts in information security and privacy management.

The company's recent renewal is conducted under the latest ISO/IEC 27001:2022 revision, which features updated requirements designed to address new and evolving security threats, particularly in digital environments driven by cloud and artificial intelligence technologies.

Suprema has indicated that aligning with the updated ISO standard enables the organisation to adapt more effectively to the complex security landscape that is continuously shaped by technological advancements. The company also referenced its 'CSA STAR' certification, an international cloud security standard operated by the Cloud Security Alliance, which is awarded to organisations meeting the rigorous requirements outlined by ISO/IEC 27001.

According to Suprema, these certifications are implemented across the entire spectrum of its operations, from the initial stages of product design and development through to deployment and service delivery. The company reports ongoing investment in research and development aimed at enhancing data security and privacy protection capabilities for its customers.

Suprema stated that achieving and maintaining these international certifications is evidence of compliance with measures such as data governance, encryption, and data anonymisation. The company emphasised that these efforts meet the stringent criteria of the European Union's General Data Protection Regulation (GDPR), thereby supporting its claims of robust data protection capabilities globally.

ISO/IEC 27001 and ISO/IEC 27701 are both established by the International Organisation for Standardisation and the International Electrotechnical Commission, and they are recognised internationally as standards for information security and privacy management systems. Certifications under these standards are valid for three years, and organisations are subject to annual surveillance audits to maintain compliance. Suprema first obtained these certifications in 2019 and has maintained them through successive audits.

Commenting on the company's latest certification renewal, Hanchul Kim, Chief Executive Officer of Suprema, said, "Global markets are demanding increasingly sophisticated security standards, particularly as transformative technologies like cloud and artificial intelligence continue to reshape the security landscape."

He continued, "Suprema has responded to these changes by strengthening and systematically operating its company-wide security management framework. We will continue to invest in and expand our global data protections capabilities, including maintaining compliance with ISO/IEC 27001:2022 and 27701."