IXcellerate, a leading data center operator in Russia, has proved the high security level of its services: following an external audit, the company received a certificate confirming compliance of its information security management system (ISMS) with the international standard ISO/IEC 27001:2022. The audit was conducted by TÜV – one of the most well-known certification centers in the world.
The requirements of the ISO/IEC 27001:2022 standard for data centers apply to the service of hosting client server and telecommunication equipment in data centers (colocation) and collecting information on service usage and billing.
These are key processes for IXcellerate’s business, which are significantly influenced by requirements for ensuring information security and availability of information resources. To pass an audit for compliance with the ISO/IEC 27001:2022 standard, a company must:
- involve employees in information security processes, provide training, and maintain their high qualifications;
- apply various organizational and technical measures to ensure information security using advanced technologies and global practices to counter threats;
- mitigate risks in the field of information security, etc.
Following the audit, the certification center TÜV confirmed that IXcellerate meets all necessary requirements, provides services in full compliance with Russian legislation, and ensures confidentiality, integrity, and availability of received information for employees, clients, counterparties, visitors, and other individuals involved in the company’s operational activities.
ISO/IEC 27001:2022 is already the third certificate issued to IXcellerate by the International Organization for Standardization (ISO). The company received its first certificate for compliance with ISO 9001 (quality management system) back in 2013 and has been regularly renewing it since then. It also holds a valid certificate for ISO 45001:2018 (occupational health and safety management system).
«Our business depends on many factors that require exceptional attention to information security issues. We operate against the backdrop of constant growth in cyber threats, and our task is to ensure continuity of service and confidentiality of our clients’ data, as their competitiveness depends on it. Certification is an integral part of our reputation and confirmation of our readiness for technological partnership at any level of requirements from clients».
Andrei Aksenov, CEO of IXcellerate
The certificate is valid for three years until December 2026. The company’s future plans include improving the level of information security and conducting internal and external audits annually to confirm compliance with the standard requirements.