• fraksken@infosec.pub
      link
      fedilink
      English
      arrow-up
      9
      ·
      5 months ago

      I passed my first audit last week. I know exactly what it entails.

      I would have expected Proton to have had this certificate a while ago.

      kudos on them passing the audit though.

      • HaleHirsute@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        5 months ago

        Awesome congrats! Maybe they didn’t need it if they are mostly business to consumer focused and average users don’t ask for it?

        • fraksken@infosec.pub
          link
          fedilink
          English
          arrow-up
          2
          ·
          5 months ago

          Thanks 😊

          It’s true that 27001 is more valued in the industry. The lack of the certificate also doesn’t imply they have no information security management system.

          I was surprised they weren’t certified yet.