Smart IT Solutions for Growing Businesses.

ISO 9001 is an international standard for quality management systems (QMSs). It is part of the ISO 9000 family of standards, addressing various quality management aspects. The ISO 9001 standard provides organizations with a framework to establish and maintain an effective quality management system, ensuring that their products or services consistently meet customers’ requirements and regulatory standards.

ISO 9001 emphasizes key principles such as leadership, employee engagement and evidence-based decision making. Being the most widely used quality management standard in the world, our ISO 9001 certification demonstrates our robust commitment to quality and increasing partners’ trust. This framework ensures both the consistency of core our processes and services, but also positions us for continuous improvement and adaptability in an ever-evolving business landscape.

We have successfully passed an independent audit against the Payment Card Industry (PCI) Data Security Standards (DSS). The Qualified Security Assessor has validated our compliance with the PCI DSS 3.2.1 for Level 1 Service Provider.

The current scope of the attestation covers Cyber Protect Cloud operating in enhanced security mode in several data centers in U.S. and EMEA.

Cyber Essentials is a government-backed scheme that is applicable to organizations operating in the United Kingdom. It includes a set of basic technical controls which organizations have to implement to protect themselves against common online security threats.

Cyber Protect Cloud successfully passed independent third-party audit and earned its Cyber Essentials Plus certificate. You can additionally check the certificate here.

The Esquema Nacional de Seguridad (ENS) is a cybersecurity framework established by the Spanish government to ensure the protection of sensitive information and critical infrastructure within public administrations. It defines a set of security measures and guidelines that organizations must adhere to in order to mitigate cyberthreats and safeguard data. ENS certification is required for public administrations’ suppliers to demonstrate their compliance with established security standards and ensure the integrity, confidentiality, availability, authenticity and traceability of information systems.

Cyber Protect Cloud has successfully passed an independent third-party audit to achieve ENS certification for the High / Alta level of security, ensuring robust protection measures are in place. Compliance with ENS aligns with the objectives of the NIS 2 Directive, contributing to the overall cybersecurity resilience of Spain and the European Union.

The Cloud Italia qualification process, managed by ACN, Agenzia Cybersicurezza Nazionale (National Cybersecurity Agency), plays a vital role in ensuring the security and reliability of cloud services offered to Italy’s public sector. Aligned with the NIS 2 Directive, it imposes stringent criteria on providers, including compliance with data protection regulations and cybersecurity standards. By meeting these requirements, providers contribute to the resilience of critical digital infrastructure and services. The qualification process fosters trust in cloud solutions, facilitating their adoption across government agencies and organizations.

Cyber Protect Cloud, having successfully passed through the qualification process, is present in the Cloud Italia Marketplace, offering trusted cloud services. This not only modernizes public services, but also enhances digital transformation and cybersecurity cooperation at the European level, in line with broader E.U. directives and initiatives.

There are several regulations that protect health information in Canada. As on the federal level, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to health care data, and the Personal Health Information Protection Act (PHIPA) is Ontario’s health-specific privacy legislation that has established general principles for the collection, use and disclosure of personal health information (PHI).

PHIPA has no officially recognized certification or accreditation process; nevertheless, Cyber Protect Cloud has assessed its data processing practices against PHIPA requirements. Note that using Cyber Protect Cloud products in a PHIPA-compliant way is the shared responsibility of Cyber Protect Cloud and its customers. Please read the Cyber Protect Cloud PHIPA white paper to check the shared responsibilities model we use to ensure fulfillment of PHIPA obligations.

NEN 7510 is the official Dutch standard for setting up and implementing information security management systems for organizations working with patients’ data in the health care industry. The standard became mandatory for health care organizations in the Netherlands in 2018, offering further interpretation and accountability of the General Data Protection Regulation (GDPR).

NEN 7510 is based on ISO 27001:2013; however, it introduces three additional controls and some specific compliance measures that supplement the ISO standard. Cyber Protect Cloud itself is not subject to NEN 7510, but by being ISO 27001 certified, we implement most of the applicable controls. Also, Cyber Protect Cloud products can help Dutch health care organizations with their NEN 7510 compliance requirements.

Cloud Security Alliance (CSA) Security Trust, Assurance and Risk (STAR) is the industry’s most powerful program for security assurance in the cloud. Cyber Protect Cloud is listed as a Trusted Cloud Provider since May 2020.

You can download the most up-to date self-assessment questionnaire for Cyber Protect Cloud directly from the CSA website.