Certificates and Licences to Operate

ISO 9001
 

Bureau Veritas Cybersecurity's quality management processes are described and certified according to ISO 9001. This means our services are consistent and meet criteria, such as adequate internal processes and a complaints and incidents process. ISO 9001 is a globally accepted standard for quality management.

ISO 14001

ISO 14001 helps organizations improve their environmental performance through more efficient use of resources and waste reduction, contributing to environmental conservation and sustainability. Bureau Veritas Cybersecurity is certified according to ISO 14001:2015, demonstrating that we meet the highest standards for environmental management. This assures our customers that we take our environmental impact seriously and take proactive steps to minimize it.

ISO 17025

ISO/IEC 17025 enables laboratories to demonstrate independence, work competently and generate valid results, promoting confidence in their work both nationally and globally. Bureau Veritas Cybersecurity's test labs are accredited according to ISO17025:2017 (see also: https://www.rva.nl/en/alle-gea...), which means our test reports give high confidence to our customers.

ISO 27001

ISO/IEC 27001 is the world's most recognized standard for information security management systems (ISMS) and their requirements. Within Bureau Veritas Cybersecurity, we use an integrated Quality and Security Management System (QSMS) certified against ISO27001:2013. The scope of this certificate covers the entire Bureau Veritas Cybersecurity organization. We can send our clients the management summary and Statement of Applicability (SoA) upon request.

ISO 45001

ISO 45001 helps organizations improve worker safety and health through a structured approach to risk management and compliance with regulations. Bureau Veritas Cybersecurity is certified according to ISO 45001:2018, demonstrating that we meet the highest standards for occupational safety and health. This assures our customers that we take the safety and well-being of our employees seriously and take proactive steps to minimize risks.

NEN 4400-1

Bureau Veritas Cybersecurity is certified with NEN 4400-1. This certification demonstrates our compliance with strict standards for labor and tax administration. NEN 4400-1 is a recognized standard in the Netherlands that ensures companies meet their obligations regarding payroll taxes and employee identity verification. For our customers, this provides assurance that we operate transparently, responsibly, and in full compliance with Dutch laws and regulations.

SOC2

Bureau Veritas Cybersecurity is SOC 2 certified. This demonstrates that we meet strict standards for security, availability, and confidentiality of customer data. SOC 2 is an internationally recognized framework developed by the American Institute of CPAs (AICPA). It provides assurance to our clients that we handle their data with care and in accordance with best practices in risk management, system integrity, and data protection.

CREST

Bureau Veritas Cybersecurity has CREST certification for penetration testing and vulnerability scanning. This means we now offer CREST-approved tests, especially for the foreign market. CREST is an independent, not-for-profit organization that sets professional standards for pen testing. It gives our customers assurance that certain quality requirements are met, including risk management, test coverage, reporting and security of your data.

CCV PENTESTING LICENSE NL

Secura was the first pen testing company in the Netherlands to be certified according to the CCV quality mark. This pentest quality mark shows the expertise and certainty Bureau Veritas Cybersecurity has to offer. This quality mark is comparable to the CREST quality mark, but is aimed at the Dutch market.

UNECE R155/R156

This regulation concerns cybersecurity of vehicles (cars and trucks). RDW must approve all vehicles to be used on public roads, and must comply with UNECE R155 and R156 standards. This standard covers the cybersecurity of software updates and connected-car telemetry. The RDW officially recognizes Bureau Veritas Cybersecurity as a test lab for UNECE R155 and R156 evaluations under the E49 Approval Authority.

BSPA

(Certificate can be viewed upon request)

BSPA is a scheme set up and managed by the AIVD, aimed at the security needs of the Dutch government (and, exceptionally, also private organizations and the business community). Bureau Veritas Cybersecurity is a BSPA test lab supervised by the National Communications Security Agency.
 

COMMON CRITERIA
 

(Certificate can be viewed upon request)

Common Criteria (CC) is one of the most well-known and internationally recognized certification programs for the evaluation of IT products. The evaluation and certification process is based on the CC standard, which contains clear requirements for the preparation and assessment of products in scope. Bureau Veritas Cybersecurity offers Common Criteria evaluation services under the Dutch CC scheme - NSCIB.

PRIVATE INVESTIGATION BUREAU (POB)
 

To carry out digital forensic investigations, Bureau Veritas Cybersecurity has a POB license in accordance with the Private Security Organizations and Detective Agencies Act (WPBR) under number 1784. This guarantees, among other things, that personal data is securely handled and that forensic evidence produced by Bureau Veritas Cybersecurity is admissible. in criminal matters or legal proceedings.