Successful transition to ISO 27001:2022

SIDN now follows a new version of the standard, which puts emphasis on cybersecurity

ISO27001 on display

Late in 2024, DEKRA carried out the annual audit for our certification under the information security standard ISO 27001. With this year's audit, there was even more at stake than usual, because we wanted to transition to the 2022 version of the standard. And it gives us great satisfaction to announce that the switch was completed successfully.

Revised risk picture

Profielfoto van Ferry Stelte, CISO bij SIDN
Ferry Stelte, CISO bij SIDN

"Information security is a high priority for us," says SIDN's Security Officer Ferry Stelte. "Developments in areas such as cloud technology, automation, artificial intelligence, cybersecurity, privacy, malware and ransomware oblige us to consider new situations. We've therefore had to reassess our current risk picture and start managing new threats on an active, structured basis. The new version of ISO/IEC 27001:2022 covers those new scenarios, so we were keen to migrate to the latest version."

The growing importance of information security

"Information security is something that concerns everyone at SIDN every single day. Its importance is growing all the time, and so is our investment in it. And we're clear about the reason for that," says SIDN's CEO Roelof Meijer. "We play a vital role on the Dutch part of the internet, and in a world where stories of hacks and information leaks make the news on a daily basis, it's very important that we have our information security in order. Some years ago, SIDN became the first registry anywhere to gain ISO 27001 certification, illustrating just how seriously we've always taken security. Transition to the new version of ISO 27001 emphasises how we continue to do everything possible to protect the information we hold and the systems we operate against unauthorised access and to ensure the continuous availability of .nl. What's more, we've completed the translation more than 6 months ahead of schedule. That's a great achievement by our people, in which I take great pride!"

Portrait Roelof Meijer, CEO SIDN
Roelof Meijer, SIDN's CEO

What is ISO 271001?

ISO 27001 is an international standard published by the International Standardisation Organisation (ISO), which sets out a framework for information security management within an organisation. It's designed to assure the confidentiality, integrity and availability of the organisation's information by defining a model security process for the realisation continuous improvement by means of a cycle of risk assessment and mitigation, monitoring and reporting.