SerNet, the developer of the open-source GRC tool verinice, has successfully obtained an ISO/IEC 27001:2022 certification. The audit was completed without any nonconformities. The certification was granted on a full-scope basis and covers all products and services of SerNet GmbH and SerNet Inc.
This is an important milestone for verinice: SerNet does not just develop software for information security management, data protection, and GRC. The company also applies the same requirements to its own ISMS.
This means that information security at SerNet is not only part of product development and consulting, but is also firmly embedded within the company itself. The certification is valid until April 2029.
Further information is available in the detailed news article on sernet.de: SerNet successfully certified to ISO/IEC 27001:2022