09.07.2024

We’re proud to share that re.alto has successfully completed ISO 27001 certification, this time for the new, revised version of the standard (version 2022). This update includes new controls to address the needs of modern businesses and evolving technologies, such as cloud environments. This new standard with more emphasis on technology and cloud computing aligns perfectly with re.alto’s business model and operations, making it even more suitable than the previous 2013 version of the standard.

ISO 27001 is the leading international standard on how to manage and apply information security and compliance within a business. It adopts a risk-based approach to evaluating security and outlines the requirements for implementing, maintaining and continually improving an information security management system, with the aim of protecting the information and data held by a company from unauthorised access or loss. The information security certification process requires companies to undergo regular audits to ensure the quality of their information security management system is being maintained and that potential improvements to security, threat management and security processes are regularly assessed and implemented. Facilitating access to data and assetless connectivity is our core business at re.alto, so it is of utmost importance that our partners can work with us in the confidence that they can trust the company to handle data and information securely and professionally. That is why, despite being a relatively young company, it was important for re.alto to obtain the latest version of the ISO 27001 certification.

The latest and revised version of the ISO contains 11 new controls to better address the requirements and challenges faced by modern businesses with a much stronger focus on remote working and cloud computing. These control points include but are not limited to: information security for the use of cloud services, configuration management, web filtering, secure coding, remote working and data leakage protection. At re.alto, we prioritise the best protection of information in the cloud by setting and monitoring strict security requirements for cloud operations. By adhering to the revised ISO 27001, organisations are better able to safeguard the business against modern threats and meet a high standard of security, especially when it comes to technology. Companies that are ISO 27001 certified can better identify risks and respond appropriately, train their team members sufficiently in information security matters and ensure all data (including sensitive data from IoT devices) is handled correctly and securely at all times.

Achieving this latest ISO 27001 certification demonstrates that re.alto safeguards the data of companies we work with and that we have well-maintained, robust security protocols and regulations in place for safely handling and processing data, and for operating within IoT and cloud environments. re.alto’s ISO 27001 certification means that potential partners do not need to audit us themselves before collaborating, saving them time and effort. We’re proud to have once again successfully met this international benchmark for security and to be able to provide potential partners with the assurance and confidence to work with re.alto-energy.