Certificates
ibCom held ISO/IEC 27001:2013 and ISO/IEC 27017:2015 certification from Best Practice Certification, under JAS-ANZ accreditation — covering the entityOS cloud service.
The certification scope is “ibCom and the entityOS cloud service, in accordance with Statement of Applicability version 2.1.”
Information Security Management System requirements.
Cloud services information security controls.
* Subject to regular surveillance assessments.
Certification is issued by an accredited third party and maintained through surveillance assessments — not self-declared.
The international standard for an Information Security Management System — the framework, controls and continual improvement.
Cloud-specific information security controls, addressing the shared responsibilities of cloud service provision.
Evidence from the automated real-time testing service forms part of the external audit.
The ISMS is continuously updated under a plan-do-check-act framework, with periodic management and technical reviews.