PURCHASE TO PAY

We help organizations with digital transformation and process optimization from purchase to pay.

TECHNOLOGY

We use various cloud solutions to suit more sizable organizations.

INTEGRATIONS

We work with several P2P solutions that interface with leading ERP systems.

1 min read

ICreative achieves ISO 27017 certification for cloud services

ICreative is among the first IT companies in the Netherlands to obtain the ISO 27001 and ISO 27017 certification for cloud services. "We can now demonstrate that our cloud services meet the ISO 27017 requirements for information security in terms of quality, confidentiality and reliability," says Vincent Wouters, CEO of ICreative.

The importance of being able to work remotely has increased more than ever in recent years and certainly by Covid-19. With that, the popularity of SaaS/cloud business software is growing. "Thanks to our cloud technology, among other things, companies can easily process their invoices remotely and users are less dependent on their own company infrastructure," says Vincent Wouters.

With the increasing use of cloud solutions, such as Basware SaaS, the question automatically arises as to whether these services are demonstrably secure. Wouters: "We find it important to pay extra attention to this. If customers choose to purchase services with us that involve processing personal data, for example, it is important that they can see that additional controls have been implemented to address cloud-specific information security threats and risks.

To test whether ICreative meets the requirements, TÜV Netherlands recently conducted an independent audit. During the assessment, the auditor very factually identifies risks and pain points so that business risks at ICreative are reduced as much as possible and continuity of the organization is guaranteed.

TÜV lead auditor Robert Bals: 'The organization, with a team of enthusiastic employees, has made a clear deepening of the issues and risks surrounding cloud and cloud services. The organization has demonstrated both as a customer and as a provider of cloud services that it has consistently implemented the control measures and is managing them properly as part of the ISMS.

An ISO 27017 certification complements ISO 27001:2017 certification, the international standard for information security. The certification for this took place during the same period and was successfully completed by ICreative. In addition, ICreative has also been re-certified for ISO 9001. "We are very proud to be among the select group of companies with this high standard," said Vincent Wouters.