Press release

SSH Achieves ISO 27001 Certification for Information Security Management

Helsinki, Finland – June 20, 2024 – SSH Communications Security (SSH), a leading cybersecurity solution provider, announced today that it has achieved the ISO/IEC 27001:2022 certification, the international standard for information security management systems.

The ISO/IEC 27001:2022 certification is the most widely used information security standard developed and published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The certification was issued by DNV Finland, an independent expert in assurance and risk management that provides audit services. The certification covers SSH's global offices in Helsinki, New York, and Singapore.

"The ISO/IEC 27001 standard specifies in detail the process of establishing, implementing, maintaining, monitoring, and improving an organization's information security management system. SSH's decision to apply for ISO/IEC certification reflects the company's commitment to proactively manage and protect information and assets and to ensure compliance with legal requirements related to information security. Achieving certification is proof that these requirements have been met," says Markus Ilmonen, Lead auditor at DNV Business Assurance Finland Oy Ab.

SSH was well-prepared for the process, having adopted many of the practices and processes required to achieve the certification before the formal process began. This is because SSH is a trusted provider for a variety of Fortune 500 companies for their secure communication needs.

"As a leading provider of security solutions to protect high-value users and targets in both IT and OT, excellent security standards have always been a top priority for us," said Interim CEO Rami Raulas. "I am very pleased that we now have official recognition of this. ISO/IEC 27001:2022 certification is a further testament to our ability to develop, deliver, and support secure solutions and respond responsibly and properly.”

“What's more, our PrivX Zero Trust Suite for privileged access and key management, our Secure Collaboration Suite 2024 for encrypted messaging, rooms, voice calls, and video conferencing, and our solutions for securing data in transit with quantum-safe algorithms all played a key role in passing this audit," Raulas continued.

You can find the certificate here.