DigiCert certification under the ISO/IEC 27001:2022 information security standard covers the system supporting its global certification authority and trust services operations, the company announced on October 26, 2026.

Key Takeaways

  • MSECB audited DigiCert’s information security management system against the international standard.
  • The certification covers operations in 11 countries and a globally distributed remote workforce.
  • DigiCert will undergo surveillance audits and periodic recertification.

What DigiCert certification covers

The certification applies to the information security management system supporting the issuance and management of publicly and privately trusted digital certificates, as well as the underlying public key infrastructure processes.

It also covers corporate functions that support those services, including governance, engineering, security, compliance, risk, legal and human resources. Within that scope, the system addresses areas such as access controls, encryption, supplier risk, incident response and security training.

Audit scope and ongoing reviews

MSECB assessed DigiCert’s security policies, processes and controls across operations in the United States, United Kingdom, Ireland, the Netherlands, Belgium, Germany, Switzerland, Latvia, Australia, India and South Africa, as well as its remote workforce.

The company said the certification can support customers’ vendor-risk assessments and procurement and compliance reviews. It will be subject to ongoing surveillance audits and periodic recertification; the announcement did not specify dates for those reviews.

Lakshmi Hanspal, DigiCert’s chief trust officer, said the certification gives customers and partners additional assurance about the company’s approach to security and risk management.

Read More News

More FinanceVelix news

Disclaimer

This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.