Information Security and Data Protection.
The EQUAL-SALARY Foundation is pleased to announce that it has obtained ISO 27001 and ISO 27701 certifications, meeting the two international standards that recognize best practices in information security management and personal data protection. This dual certification reinforces the transparency, confidentiality, and security of the foundation’s processes in certifying equal pay and equal opportunities.
These certifications, awarded by the independent accredited body SQS, validate the effectiveness of the Foundation’s Information Security Management System (ISMS) and the protection of personal data it handles in its activities. ISO 27001 specifically addresses risk management related to information security, while ISO 27701 extends this approach to personal data protection, in line with global regulations such as the European Union’s General Data Protection Regulation (GDPR).
“Data integrity and security, process robustness, and trust are essential pillars for our Foundation. Therefore, we are very proud to have achieved ISO 27001 and ISO 27701 certifications, which crown our ongoing efforts to ensure the protection of information from our candidate organizations. These certifications attest to our commitment to upholding the strictest standards in data security and confidentiality, in alignment with international best practices”, commented Noémie Storbeck co-CEO of the EQUAL-SALARY Foundation.
About ISO
The International Organization for Standardization (ISO) is an independent, non-governmental global institution that develops and publishes international standards across a wide range of sectors. ISO brings together experts from 172 member countries to develop standards aimed at establishing optimal practices that ensure the quality, safety, interoperability, and efficiency of systems and processes in organizations. Achieving ISO certification is a strong indicator of compliance with international best practices and a commitment to operational excellence.
ISO 27001
ISO 27001 is the leading international standard for information security management systems (ISMS). It provides a comprehensive framework that enables organizations of all sizes and sectors to create, implement, maintain, and continually improve their ISMS. Compliance with ISO 27001 demonstrates that a company has established a solid system to manage data security risks, following the best practices and principles set by the standard. ISO 27001 helps organizations anticipate risks and proactively address vulnerabilities by adopting a holistic approach that integrates people, policies, and technology. This standard thus promotes risk management, strengthens resilience against cybercrime, and supports operational excellence.
ISO 27701
ISO 27701 is an extension of the ISO 27001 standard, specifically designed for managing the protection of personal data. It provides a detailed framework that enables organizations to establish, implement, maintain, and improve a privacy information management system. Complying with ISO 27701 means implementing robust controls to manage risks related to data privacy, following best practices and internationally recognized principles. This standard helps organizations meet regulatory requirements for data protection, such as the GDPR, by adopting an integrated approach that covers both technical and organizational aspects. It thus strengthens stakeholder trust, ensures compliance, and enhances risk management in privacy matters.
For more information on our data protection policy, please visit our privacy center on our website.
