Notum Achieves ISO/IEC 27001 Certification for Information Security

Notum, a headless CMS development agency, has achieved ISO/IEC 27001:2022 certification for its information security management system (ISMS), marking a significant milestone in the company's commitment to robust data protection. This certification, issued by TDS Brno, an accredited certification body, covers the entire company, including every team, process, and employee, as well as the company's Brno office. The ISO/IEC 27001 certification ensures that Notum adheres to the highest standards of information security, providing clients with independent assurance that their data and platforms are safeguarded according to the globally recognized security standard.

The certification applies to Notum’s web application development services for clients in Czechia and abroad. For clients like Direct Insurance or Scenic Group, Notum builds systems that form the backbone of their business operations, and ISO 27001 certification gives them independent proof that Notum protects their data and platforms as required by the standard. This certification not only enhances Notum’s reputation but also provides clients with a level of assurance that their data and systems are secure and compliant with industry best practices.

The benefits of the ISO/IEC 27001 certification are manifold. Notum can offer clients faster vendor approval, as security reviews and vendor risk assessments are shorter and more predictable, including for companies that must demonstrate NIS2 compliance across their supply chain. Additionally, Notum’s secure development practices ensure that every project from the start includes security requirements, and no release ships with known critical or high-risk vulnerabilities. Furthermore, the certification guarantees that each client’s data stays separate, and only people who need it for their work get access, thereby protecting sensitive information.

The protection of data and know-how is another critical aspect of the ISO/IEC 27001 certification. Notum maintains strict access controls, ensuring that only authorized personnel have access to client data. This is achieved through regular security training, least-privilege access, and multi-factor authentication (MFA), which address the most common causes of incidents. These measures help to mitigate the risk of human error or malicious activities, thereby safeguarding Notum’s clients’ data and systems.

The ISO/IEC 27001 certification also supports business continuity by having a continuity plan with regularly tested backups. This ensures that software delivery can continue running when something breaks, thus minimizing downtime and maintaining service levels. The certification further reduces human risk by providing regular security training, least-privilege access, and multi-factor authentication (MFA), addressing the most common causes of incidents.

In a separate development, NanoMatriX Technologies Limited, a provider of secure document and product protection solutions, has received ISO 27001, ISO 27701, ISO 27017, and ISO 27018 certifications from TUV SUD. These certifications emphasize NanoMatriX’s commitment to delivering cyber-secure and data-protected solutions to its diverse clientele across 50+ countries. These globally recognized certifications underscore NanoMatriX’s adherence to the highest information security, cybersecurity, and data protection standards, reinforcing its position as a trusted provider of secure document and product protection solutions.