Omega 365 Core achieves ISO 27017

Peter Øren, Chief Technology Officer, points to the achievement as part of the wider work to keep security aligned with the development of Omega 365.

“Security has to evolve alongside the platform. As more of our services move to the cloud, it is important that the way we manage and secure them develops with it. ISO 27017 is a good confirmation of the work being done in this area,” says Øren.

Omega 365 Core provides the shared technology and infrastructure behind Omega 365, giving the team a central role in how cloud security is handled across the platform.

ISO 27017 builds on the information security controls in ISO 27001, adding guidance specifically for cloud services. It covers areas such as how responsibilities are divided between cloud providers and customers, which security controls are needed, and how cloud services are managed securely.

For the Omega 365 Core team, much of the work happened behind the scenes. It meant going through existing routines in detail, documenting more thoroughly how things work in practice, and addressing gaps that were identified along the way.

Andriejus Koleinikovas, Chief Information Security Officer, led the work towards ISO 27017 together with his team, working closely with colleagues across Omega 365 Core and HSEQ to get the documentation and controls in place ahead of the audit.

“Our customers expect a high level of security from a SaaS provider, and ISO 27017 is part of that. It gives them added confidence in how we manage cloud security and, ultimately, in the Omega 365 platform,” says Koleinikovas.

Karina Hovden Stava, HSEQ Manager, says more customers have been asking how Omega 365 works with cloud security, especially as AI introduces new kinds of threats.

“It's reassuring to have this kind of external confirmation, especially with AI changing the threat picture so quickly. It shows customers that Andriejus and his team are keeping both us and them properly protected,” concludes Hovden Stava.