Locks and Security News: your weekly locks and security industry newsletter
28th October 2026 Issue no. 825
Your industry news - first
We strongly recommend viewing Locks and Security News full size in your web browser. Click our masthead above to visit our website version.
DigiCert achieves global certification
DigiCert has achieved global ISO/IEC 27001:2022 certification for its information security management system, strengthening security assurance across its global operations.
The certification follows an independent audit. It provides customers and partners with additional assurance of DigiCert's approach to protecting sensitive information, managing security risks and maintaining robust security practices. For organisations in highly regulated industries, the certification can also help simplify vendor-risk assessments, procurement processes and compliance reviews.
“Trust is strongest when it can be independently verified,” says Lakshmi Hanspal, Chief Trust Officer at DigiCert. “ISO 27001 certification gives our customers and partners additional assurance that the same disciplined approach to security and risk management that underpins our solutions also governs how we protect information and operate our business. As cloud environments, machine identities, and AI systems expand, organisations need technology providers that can demonstrate and assert that security and continuous improvement are built into their operations.”
Certification Scope
DigiCert's ISO/IEC 27001:2022 certification covers the ISMS supporting its CA and Trust Services, including the issuance and management of publicly and privately trusted certificates and underlying PKI processes. The scope also encompasses Governance, Corporate IT Operations, PKI Operations, Authentication & Support, Engineering, Security, Compliance, Risk, Legal, Product, and Human Resources functions, to the extent that they support these services.
The certification spans operations in the United States, United Kingdom, Ireland, the Netherlands, Belgium, Germany, Switzerland, Latvia, Australia, India, and South Africa, as well as globally distributed remote operations.
Within this certified scope, DigiCert's ISMS addresses key areas including:
· Information security governance and risk management
· Identity and access controls
· Data protection and encryption
· Secure product development and change management
· Supplier and third-party risk management
· Vulnerability management and incident response
· Information security continuity and recovery readiness
· Employee security awareness and training
· Security monitoring, performance evaluation and continual improvement
For customers, particularly those operating in highly regulated industries, ISO/IEC 27001:2022 certification can provide greater confidence in DigiCert’s security practices, support vendor-risk assessments, and help streamline procurement and compliance reviews. The certification also strengthens DigiCert’s ability to meet the security-assurance requirements of global enterprises and public-sector organisations.
The achievement builds on DigiCert’s broader portfolio of independently assessed security and compliance programmes. DigiCert undergoes numerous audits annually across its global operations and maintains certifications and attestations that include SOC 2 Type II, WebTrust for Certification Authorities, WebTrust Baseline Requirements, WebTrust Extended Validation and Code Signing, and European Telecommunications Standards Institute standards for qualified trust services.
Achieving ISO/IEC 27001:2022 certification is not a one-time assessment. DigiCert will undergo ongoing surveillance audits and periodic recertification to demonstrate that its ISMS continues to operate effectively and evolve alongside changing technologies, threats, and regulatory expectations.
DigiCert’s ISO/IEC 27001:2022 certificate and additional security and compliance information are available at DigiCert’s Trust Page.
28th October 2026