Cloud-IAM | DOCS

Appearance

ISO 27001:2022 certification ​

Overview of ISO 27001:2022 ​

ISO 27001 is an internationally recognised standard for information security management, focused on establishing robust controls for data protection through an Information Security Management System (ISMS).

Achieving ISO 27001:2022 certification demonstrates Cloud-IAM’s commitment to maintaining the highest standards of security across our Managed Keycloak SaaS (starting from little bunny plan).

End-to-end ISO 27001 certification on managed Keycloak with Cloud-IAM ​

Both Cloud-IAM and the cloud providers are now ISO 27001 certified, learn more on each cloud providers certifications here.

This end-to-end certification means that every layer of our Managed Keycloak service, from infrastructure to IAM functionality, meets rigorous security standards. Customers can be confident that their Keycloak data as IAM, CIAM, IdP Broker is managed end-to-end with security and compliance in mind.

Accessing the certification ​

To access Cloud-IAM’s official certification document, click here: ISO 27001:2022 Certification.

For additional questions or documentation requests, contact Cloud-IAM’s support team.

Benefits of ISO 27001 certification for managed Keycloak ​

Enhanced Keycloak deployment security ​

  • Data Encryption: Authentication data within Cloud-IAM infrastructure is encrypted both in transit and at rest, adhering to ISO 27001 standards to protect sensitive information.
  • Secure Deployment: Managed Keycloak’s configuration in an ISO 27001-certified environment allows customers to deploy IAM, CIAM, IdP Broker securely.
  • Proactive Monitoring: Our ISO 27001 certification requires stringent incident response and risk management practices. Customers benefit from our proactive monitoring and defined response protocols.

Compliance and regulatory support ​

  • Regulatory Alignment: Our ISO 27001-certified environment helps support compliance with regulations like GDPR, HIPAA, and SOC 2 by ensuring secure data handling.
  • Simplified Documentation: Customers benefit from our certification documentation, which simplifies compliance verification and provides proof of secure practices by Cloud-IAM.

Disaster recovery and business continuity plan ​

  • Business Continuity Procedures: Our ISO 27001-compliant Business Continuity Plan includes detailed steps for maintaining essential services during unforeseen events, minimizing the impact on customers.
  • Disaster Recovery Objectives: Cloud-IAM’s Disaster Recovery procedures focus on rapid recovery of systems and data, with defined Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) that meet industry best practices.
  • Regular Testing and Updates: Disaster Recovery and Business Continuity Plans are tested and reviewed regularly to ensure effectiveness, aligning with ISO 27001’s commitment to continuous improvement.
  • Redundant Infrastructure: Our infrastructure leverages redundancy and automated failover systems to maintain uptime for Managed Keycloak and other critical services.
  • Customer Communication: In case of a major disruption, we have clear protocols for customer notification and status updates to keep stakeholders informed at every stage of recovery.