The certification covers the issuance and management of publicly and privately trusted digital certificates, underlying Public Key Infrastructure (PKI) processes, and supporting corporate functions, independently validating Digicert's risk-based approach to information security.

The certification follows a comprehensive independent audit by MSECB against ISO/IEC 27001:2022, the internationally recognised standard for information security management. The assessment evaluated Digicert's security policies, processes, and controls across operations in 11 countries and its globally distributed remote workforce, reinforcing the company's commitment to protecting sensitive information and continually improving its security practices.

“Trust is strongest when it can be independently verified,” said Lakshmi Hanspal, Chief Trust Officer at Digicert. “ISO 27001 certification gives our customers and partners additional assurance that the same disciplined approach to security and risk management that underpins our solutions also governs how we protect information and operate our business. As cloud environments, machine identities, and AI systems expand, organisations need technology providers that can demonstrate and assert that security and continuous improvement are built into their operations.”

For customers, particularly those operating in highly regulated industries, ISO/IEC 27001:2022 certification can provide greater confidence in Digicert’s security practices, support vendor-risk assessments, and help streamline procurement and compliance reviews. The certification also strengthens Digicert’s ability to meet the security-assurance requirements of global enterprises and public-sector organisations.

Achieving ISO/IEC 27001:2022 certification is not a one-time assessment. Digicert will undergo ongoing surveillance audits and periodic recertification to demonstrate that its ISMS continues to operate effectively and evolve alongside changing technologies, threats, and regulatory expectations.