In an official newsroom post, Samsung announced that it has acquired two international standard certifications for cloud security: ISO 27001 and ISO 27017. Getting these two cloud security certifications also proves the company's “world-class information protection and system operation capabilities.”
The ISO 27001 certification (Information Security Management System) and the ISO 27017 certification (Cloud Service Information Security Management System) were established by the International Organization for Standardization and certified by the British Royal Society of Standards. Samsung confirmed that they were able to acquire both cloud security certifications simultaneously.
Apparently, Samsung's MX division, which is in charge of mobile devices such as smartphones, obtained both cloud security certifications. This also proves the company's ability to manage the system and protect the information of the “Private Cloud,” which is operated for services such as software updates, is the world's best.
ISO 27001 is one of the most prestigious certifications for information protection, based on the Information Security Management System (BS7799) standard set by BSI Group in 1999. In order to obtain this certification, an applicant must meet 133 management standards in 11 categories, including information protection policy and information access controls.
On the other hand, the ISO 27017 certification can be acquired when an applicant operates a cloud service environment and information protection management as per international standards. On Samsung's achievement, BSI (British Standards Institution), the world's first national standard-setting institution, said, “Through this review, Samsung Electronics' private cloud system We have confirmed that operational capabilities and security are in line with international standards.”
Ahn Gil-joon, Vice President of the Mobile Platform Center at Samsung Electronics‘ MX division, also stated that the company is always going above and beyond to keep cloud technology and security capabilities at the highest level and that it will continue to work hard to meet international standards.
