ISO 27001 Information Security Management System
ISO 27001 is a widely recognized industry certification in the field of information security management, and VTIC’s achievement of this certification demonstrates our alignment with international standards and compliance with the required security standards in this area.
ISO 27701 Privacy Information Management System
ISO 27701 is a widely recognized industry certification in the field of privacy protection, and VTIC’s achievement of this certification indicates our compliance with the required privacy protection standards based on our information security management system.
ISO 27018 Personal Information Protection Management System for Public Cloud
ISO 27018 is an international certification that ensures the protection of personal information in the cloud. VTIC’s achievement of this certification demonstrates our compliance with international standards for cloud-based data security and personal information protection.
ISO 27017 Cloud Security Management System
ISO 27017 is an international certification in the information security management of cloud services, and VTIC’s achievement of this certification demonstrates our compliance with international standards for the mechanism and implementation of cloud security control.
APEC CBPR
Formulated by the Asia-Pacific Economic Cooperation (APEC), APEC CBPR (Cross Border Privacy Rules) regulates the transmission of personal data among APEC member countries. VTIC’s achievement of this certification demonstrates our compliance with the required personal data protection standards.
APEC PRP
APEC PRP (Privacy Recognition for Processors) certification is for data processors who demonstrate their ability to help data controllers meet relevant privacy compliance obligations. VTIC’s achievement of this certification demonstrates our compliance with the required privacy protection standards.
Data Protection Trustmark (DPTM)
DPTM is a data protection trustmark granted by the Infocomm Media Development Authority (IMDA) in Singapore to certify companies with data protection measures that meet the requirements of Singapore’s Personal Data Protection Act (PDPA). VTIC’s achievement of this certification demonstrates our compliance with the required personal data protection standards.
SOC 2 (Type II) & SOC 3
The SOC (System and Organization Controls) report is an independent assurance report on an organization’s internal control issued by a third party after an assessment based on the assurance standards set by the American Institute of Certified Public Accountants (AICPA). VTIC’s achievement of SOC 2 (Type II) and SOC 3 reports indicates we have achieved the standards as required by SOC standards.
EU-U.S. DPF, UK Extension & Swiss-U.S. DPF
The EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF were respectively developed by the U.S. Department of Commerce and the European Commission, UK Government, and Swiss Federal Administration to provide U.S. organizations with reliable mechanisms for personal data transfers to the United States from the European Union, United Kingdom, and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law.