ISO 27001, ISO 27017, and ISO 27018 certification of Jitterbit
Introduction
The Information Security Management System of Jitterbit is certified to conform with ISO 27001 version 2022 with supplemental controls in ISO 27017:2015 and ISO 27018:2019. Jitterbit believes the security and privacy of customer data is a high priority. We have invested in the security and privacy features that help keep customer data safe. Jitterbit has achieved ISO 27001 certification from A-lign, an independent, third-party auditor accredited by the ANSI ASQ National Accreditation Board (ANAB).
What are ISO 27001, ISO 27017, and ISO 27018?
ISO 27001 is an international standard that covers planning, design, implementation, monitoring, testing, and improving a security management system. This important security standard details the requirements and best practices which uses regular risk assessments in order to manage company and customer information assets.
ISO 27017 builds upon the existing security controls in ISO 27001. It deals with the protection of information in cloud services. ISO 27017 provides guidance and recommendations on implementing cloud-specific information security controls. This standard provides advice and guidance for cloud customers and providers.
ISO 27018 is an international standard that focuses on the protection of personal data in the cloud. Building on the foundation of ISO 27001 and ISO 27017, it provides guidelines for cloud service providers to ensure they meet the privacy requirements for personal data processing. ISO 27018 emphasizes the importance of transparency, user consent, and the security of personal data, offering best practices for cloud providers to safeguard customer privacy and comply with applicable data protection laws.
About the ISO audit and assessment
The ISO audit and assessment provides you assurance around:
- implementation of an information security management system for Harmony development, operations, and support;
- controls that we have put in place to protect personally identifiable information (PII); and
- implementation of an in-depth, company-wide information security risk management program.
The ISO audit and assessment – along with the Harmony ISO 27001 Statement of Applicability (SOA) – provide information about the controls that Jitterbit implemented in support of our security and privacy commitments.
For more information about Jitterbit's commitment to security and information management, see the Jitterbit Security Center. If you have specific questions, please contact us at dpo@jitterbit.com.