International. Genetec announced that it has achieved ISO 27001 and UL 2900-2-3 Level 3 cybersecurity certification for the sixth and fourth consecutive year, respectively. In addition, it has now also implemented the ISO 27017 standard, related to cybersecurity.
The company has officially shared its achievement, as it ensures that these certifications "underscore its unwavering commitment to ensure the cybersecurity of its solutions and the ISMS (information security management systems) that govern them."
Genetec confirmed that with ISO 27001 and 27017 certifications, its customers can rest assured that they are working with an organization that has implemented strict controls to manage sensitive data and mitigate cyber threats when using the company's cloud solutions.
Such solutions include: Autovu CloudrunnerTM, Security Center SaaS edition, Genetec Stratocast™, Genetec Clearance, Genetec ClearID™™, SynergisTM, Access Control as a service, and Genetec Curb Sense™.
Details of ISO 27001 and 27017
ISO 27001 provides a checklist of controls for the establishment, operation and maintenance of a company's information system, it is in a way the safety management system.
ISO 27017 focuses on protecting information in cloud services with a focus on key areas of control, including asset management, access control, physical security and compliance. So with this standard the system and processes of an organization are subject to strict standards of security and privacy.
UL 2900 Cybersecurity Certification Renew
Genetec also received UL 2900-2-3 Level 3 cybersecurity certification for the fourth consecutive year and claims to be the only VMS vendor in the world to have achieved this certification.
What is the UL? It is a cybersecurity assurance program (UL CAP) is a certification program that evaluates the security of products and processes of suppliers that can be connected to the network. In that sense, the UL 2900-2- level 3 standard, for which Genetec Security Center Omnicast™ VMS is certified, includes a series of checks that include fuzz tests, binary code analysis, vulnerability assessment, penetration testing and validation of risk management methodologies.
Genetec passed SOC 2 Type 2 audit
Genetec also passed the SOC 2 Type 2 audit to include its entire cloud product portfolio and the ISMS that governs them. According to the brand this means that the internal controls of its solutions "are based on industry best practices and align with the criteria and requirements of SOC 2 Type 2".
Defined by the American Institute of Certified Public Accountants (AICPA), this audit is a seal of approval that the company complies with the best practices in data protection and has all the guarantees and procedures established to control who can access confidential data.
The SOC 2 Type 2 audit is performed by third parties and covers five key areas: security, availability, processing integrity, confidentiality and privacy.
You can view Genetec's SOC 3 report here.
Mathieu Chevalier, Principal Security Architect at Genetec, commented: "Certification to ISO and UL standards, and SOC 2 Type 2 audits are essential elements of our comprehensive approach to cyber resilience. Customers can rest assured that we have the right policies and procedures in place to manage sensitive data when using our cloud solutions or hybrid deployments."
