Onventis Achieves Extended ISO/IEC 27001:2022 Certification
Onventis is proud to announce the successful extension and update of its Information Security Management System (ISMS) certification to ISO/IEC 27001:2022, the latest global standard for information security management.
With this milestone, the certification now covers Onventis Holding GmbH, Onventis GmbH (Germany), Onventis B.V. (Netherlands), and Onventis AB (Sweden), marking a major step forward in the company’s long-term security and compliance strategy.
What ISO/IEC 27001:2022 Means
ISO/IEC 27001 is the internationally recognized framework for implementing, maintaining, and continuously improving an ISMS. It provides a structured framework of policies, processes, and controls to protect sensitive information and manage risks effectively.
The 2022 revision of the standard modernized the control framework by reducing the total number of controls from 114 to 93. It introduced new measures, such as secure coding and data leakage prevention, and reorganized them into four clear domains: Organizational, People, Physical, and Technological.
What Has Changed at Onventis
Until now, the ISMS certification applied only to Onventis GmbH and excluded software development. With this milestone, Onventis has:
- Extended certification to Onventis Holding, GmbH, B.V., and AB
- Included all offices and data centers in these locations
- Brought software development fully into scope
- Successfully transitioned all documentation, processes, and controls from the 2013 to the 2022 ISO/IEC 27001 requirements
Why It Matters
For Onventis: This achievement strengthens resilience against modern security threats, embeds security practices across every business unit, and demonstrates commitment to continuous improvement.
For customers and partners:
- Trusted assurance that their data is protected under audited, internationally recognized best practices
- Lower vendor risk and simplified compliance during supplier assessments
- Confidence that Onventis takes a proactive, company-wide approach to information security
A Continued Commitment to Trust
With ISO/IEC 27001:2022 certification now spanning its major European entities, Onventis continues to strengthen the foundation for secure digital procurement, ensuring that customers’ information remains protected, everywhere and always.