ISO 27001
A brief description of our ISO 27001 quality system.
Dows Visma have a ISO 27001 certification?
We develop, deliver and operate our cloud services based on the Visma Cloud Delivery Model (VCDM), built on industry standards and best practices. It describes aspects of how we should be organized (virtual teams, roles, responsibilities), how we should work (processes) as well as technical requirements and best practices necessary for successful cloud service delivery. VCDM is ISO 27001 certified. An ISAE 3402 SOC 1, type 2 is available on request.
The scope of VCDM is the development and operation of cloud services. Several of the ISO 27001 controls has a wider reach, but that does mean that the whole organisation like sales and support is fully certified. One example is Security Awareness. The Visma Security Awareness Program covers the whole organisation, even if the scope of VCDM is limited to cloud deliveres.
You can find the latest ISO 27001 certificate for VCDM on the Visma Trust Center.