Information Security & ISO 27001

Independent Information Security Rating Institute (IISRI®) takes information security seriously. Protecting the confidentiality, integrity, and availability of information is fundamental to our mission and to the trust placed in us by clients, partners, and stakeholders worldwide.

We operate an Information Security Management System (ISMS) that governs how we manage people, processes, technology, and data across our organisation.

IISRI® was certified to ISO/IEC 27001 for its Information Security Management System, covering:

• Internal and external rating services
• Assessment management systems
• Supporting people, processes, infrastructure, hardware, and software

This certificate demonstrates our longstanding commitment to information security.

As our certificate is expired, we are currently undergoing a new ISO/IEC 27001:2022 certification, with formal certification planned for February 2026.

The transition to ISO/IEC 27001:2022 reflects:

• Changes in the threat landscape
• Updated Annex A controls
• Stronger focus on governance, risk, and operational resilience

Our ISMS continues to operate and evolve in line with ISO 27001 principles during this certification process.

Even while new certification is in progress, IISRI®:

Our approach ensures that information security is not a checkbox exercise, but an integral part of how we operate and deliver value.

We believe transparency builds trust. That is why we clearly communicate our certification status and do not make claims beyond what is accurate and verifiable.

Upon completion of ISO/IEC 27001:2022 certification, this page will be updated accordingly.

Our ISMS covers IISRI®'s core activities, including but not limited to:

This ensures a consistent, organisation-wide approach to managing information security risks.

Information security is a journey, not a one-time milestone.

Our ISO 27001:2022 certification initiative is part of our broader commitment to: