Lehi, Utah, Oct. 26, 2026 (GLOBE NEWSWIRE) -- DigiCert, a global leader in intelligent trust, today announced it has achieved ISO/IEC 27001:2022 certification for its information security management system (ISMS) supporting its global Certification Authority (CA) and Trust Services operations. The certification covers the issuance and management of publicly and privately trusted digital certificates, underlying Public Key Infrastructure (PKI) processes, and supporting corporate functions, independently validating DigiCert's risk-based approach to information security.
The certification follows a comprehensive independent audit by MSECB against ISO/IEC 27001:2022, the internationally recognized standard for information security management. The assessment evaluated DigiCert's security policies, processes, and controls across operations in 11 countries and its globally distributed remote workforce, reinforcing the company's commitment to protecting sensitive information and continually improving its security practices.
“Trust is strongest when it can be independently verified,” said Lakshmi Hanspal, Chief Trust Officer at DigiCert. “ISO 27001 certification gives our customers and partners additional assurance that the same disciplined approach to security and risk management that underpins our solutions also governs how we protect information and operate our business. As cloud environments, machine identities, and AI systems expand, organizations need technology providers that can demonstrate and assert that security and continuous improvement are built into their operations.”
Certification Scope
DigiCert's ISO/IEC 27001:2022 certification covers the ISMS supporting its CA and Trust Services, including the issuance and management of publicly and privately trusted certificates and underlying PKI processes. The scope also encompasses Governance, Corporate IT Operations, PKI Operations, Authentication & Support, Engineering, Security, Compliance, Risk, Legal, Product, and Human Resources functions, to the extent that they support these services.
The certification spans operations in the United States, United Kingdom, Ireland, the Netherlands, Belgium, Germany, Switzerland, Latvia, Australia, India, and South Africa, as well as globally distributed remote operations.
Within this certified scope, DigiCert's ISMS addresses key areas including:
- Information security governance and risk management
- Identity and access controls
- Data protection and encryption
- Secure product development and change management
- Supplier and third-party risk management
- Vulnerability management and incident response
- Information security continuity and recovery readiness
- Employee security awareness and training
- Security monitoring, performance evaluation and continual improvement
For customers, particularly those operating in highly regulated industries, ISO/IEC 27001:2022 certification can provide greater confidence in DigiCert’s security practices, support vendor-risk assessments, and help streamline procurement and compliance reviews. The certification also strengthens DigiCert’s ability to meet the security-assurance requirements of global enterprises and public-sector organizations.
The achievement builds on DigiCert’s broader portfolio of independently assessed security and compliance programs. DigiCert undergoes numerous audits annually across its global operations and maintains certifications and attestations that include SOC 2 Type II, WebTrust for Certification Authorities, WebTrust Baseline Requirements, WebTrust Extended Validation and Code Signing, and European Telecommunications Standards Institute standards for qualified trust services.
Achieving ISO/IEC 27001:2022 certification is not a one-time assessment. DigiCert will undergo ongoing surveillance audits and periodic recertification to demonstrate that its ISMS continues to operate effectively and evolve alongside changing technologies, threats, and regulatory expectations.
DigiCert’s ISO/IEC 27001:2022 certificate and additional security and compliance information are available at DigiCert’s Trust Page.
About DigiCert
DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS and certificate lifecycle management to secure infrastructure, software, devices, messages, and AI content, agents and models. Learn why more than 125,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today's threats and prepare for a quantum-safe future at www.digicert.com.
