Nossa Data announces ISO-27001 cybersecurity certification

Introduction

At Nossa Data, we are proud to disclose that our ESG reporting software is an accredited ESG software partner for various ESG Frameworks and ESG Standards, including the GRI, SASB, ISSB S1 / S2, CDP, ESRS and more. This growth has enabled Nossa Data to continue to provide value to clients like ESG reporting specialists at PensionBee, Vodafone, PostNL, and more. Here is a post speaking through our commitment to cybersecurity through our procurement certifications and initiatives.

The Importance of Cybersecurity & ISO-27001

Cybersecurity is a top of the agenda priority for many tech companies, but even more so in the space of ESG reporting. For instance, many EU-listed and large-cap public companies are preparing for their CSRD disclosures using data which is yet to be made publicly available or audited. 

As such, cybersecurity and reliability have always been at the core of everything we build at Nossa Data. From day one, we understood very well that keeping our platform secure and running smoothly 24/7 is extremely important to our clients, partners and the wider ESG industry.

As of November this year, we are officially an ISO-27001 certified company, meaning our clients can be assured that an independent auditing body of experts in information security has confirmed our approach to securing our clients’ ESG data is in line with globally recognised industry standards. 

The aim of ISO-27001 is to help organisations such as Nossa Data keep their information assets secure. This certification therefore attests to Nossa Data’s continued dedication to storing and managing ESG data securely and reliably. Standards like ISO-27001 and GDPR compliance not only ensure we adhere to the high standard of expectations from the enterprise and regulatory landscape we operate in, but also demonstrate our team’s ability to operate successfully within the fast-changing landscape of cybersecurity threats.

As part of our broader security program, we have implemented several measures across areas of physical security, cloud security, application and software development security, product and internal tools security, as well as a commitment to invest regularly in our team’s education and growth in cybersecurity and privacy matters. This multi-faceted approach underscores our commitment to maintaining the highest standards of security across all aspects of our operations.

Customers can verify our ISO-27001 certificate here.