Our Security Certificates

The security and quality certificates we have achieved as Next4biz are as follows:

ISO/IEC 27001 Information Security Management Certificate

ISO/IEC 27001 is an international information security management standard setting out in detail the requirements for a powerful information security management system. With a risk-based approach, it aims to ensure the targeted security level through correct human resources policies, technical procedures and information technology infrastructure for the protection of the information and information assets of the businesses in the conduct of their processes. According to ISO/IEC 27001, the objective of an information security management system (ISMS) is to identify and analyze the risk exposures of a business and take the appropriate measures to keep such risks under control.

ISO/IEC 27001 is the only international auditable standard that sets out the requirements for an information security management system. It has been designed to ensure the selection of adequate and proportional security audits. It has adopted a process-based approach in the establishment, implementation, operation, monitoring, examination, maintenance and development of an ISMS. The security of the information must be tested and checked continuously. Information security aims preservation of the confidentiality, integrity and availability of information.

ISO/IEC 27001 Information Security Management System (ISMS) addresses the corporate structure and policies, planning activities, responsibilities, applications, procedures, processes and resources. Ensuring business continuity is considered as an important prerequisite for ensuring compliance with the regulations involving information security and data confidentiality.

ISO/IEC 27701 Privacy Information Management Certificate

ISO 27701: 2019 is a privacy extension to ISO 27001. The goal of the standard is to enhance the existing Information Security Management System (ISMS) with additional requirements in order to establish, implement, maintain and continually improve a Privacy Information Management System. The standard outlines a framework for the controlling and processing of data to manage data privacy to reduce the risk to the privacy rights of individuals.

ISO 27001 and 27701 standards provide the following benefits to the data processors and controllers:

• Compliance with the privacy requirements provided in the laws and regulations is ensured. (Example: A privacy control defined in the ISMS can ensure the fulfillment of multiple requirements provided in the General Data Protection Regulation (GDPR).
• Establishment and operation of the ISMS is a matter of governance and assurance. The results and proofs of a work aiming the ensuring of information privacy can be presented.
• It demonstrates that the data storing and processing organizations are regularly audited by accredited third party information security auditors to make sure that they comply with the information security standards. In the service purchases, it provides assurance for the information security and the protection of privacy information.

BS 10012 Personal Information Management Certificate

BS 10012 offers the best implementation framework for a privacy information management system meeting the principles of the GDPR. It provides a summary of the basic requirements to be fulfilled in the collection, storage, processing, maintenance or destruction of any personal records of individuals. Allowing easy integration with other popular management system standards, BS 10012 adds values to businesses of any size. These values include but not limited with the following:

• It helps identifying and managing the risks involving the personal information;
• It supports complying with the data protection legislation;
• It allows continuous checking and improvement of processes;
• It reinforces the trust of clients and stakeholders;
• It protects the reputation of the organizations.

In addition to the above security certificates, we have the most recent ISO 9001 Quality Management System and ISO 10002 Quality Management – Customer Satisfaction certificates.

Data Centers Information Security and Standards

The information security compliance of the data centers from where we provide your cloud services is as follows:

Rackspace Data Center Standard Compliance (US & UK)

https://www.rackspace.com/compliance

• ISO/ IEC 27001
• ISO 14001
• ISO 18001
• ISO 9001
• SOC 1 (SSAE 18)
• SOC 2
• SOC 3
• PCI DSS Level 1

Microsoft Azure Data Center Standard Compliance (EU)

https://docs.microsoft.com/en-us/azure/compliance/

• CIS benchmark
• CSA STAR Attestation
• CSA STAR Certification
• CSA STAR self-assessment
• SOC 1
• SOC 2
• SOC 3
• ISO 20000-1
• ISO 22301
• ISO 27001
• ISO 27017
• ISO 27018
• ISO 27701
• ISO 9001
• WCAG

Turkcell Data Center Standard Compliance (Turkey)

• ISO/IEC 27001
• ISO 22301
• ISO 5001
• ISO 10002
• ISO/IEC 20000-1
• ISO 9001
• TIER III OPERATIONS UPTIME INSTITUTE CERTIFIED GOLD