Certificates and Permits for Business Operations

ISO 9001

Bureau Veritas Cybersecurity Europe’s quality management processes are documented and certified in accordance with ISO 9001. This means that our services are consistent and meet criteria such as adequate internal processes and a complaints and incident management process. ISO 9001 is a globally accepted standard for quality management.

ISO 14001

ISO 14001 helps organizations improve their environmental performance through more efficient use of resources and waste reduction, thereby contributing to environmental conservation and sustainability. Bureau Veritas Cybersecurity Europe is certified to ISO 14001:2015, demonstrating that we meet the highest standards for environmental management. This assures our clients that we take our environmental impact seriously and take proactive steps to minimize it.

ISO 17025

ISO/IEC 17025 enables laboratories to demonstrate independence, operate competently, and generate valid results, thereby promoting confidence in their work both nationally and globally. Bureau Veritas Cybersecurity Europe’s testing laboratories are accredited to ISO 17025:2017 with a scope covering Common Criteria (EAL4+) and EUCC Substantial.  Our test reports provide our customers with a high level of confidence.

ISO 27001

ISO/IEC 27001 is the world’s most widely recognized standard for information security management systems (ISMS) and related requirements. At Bureau Veritas Cybersecurity Europe, we use an integrated Quality and Security Management System (QSMS) that is certified to ISO 27001:2013. The scope of this certificate covers the entire Bureau Veritas Cybersecurity Europe organization. Upon request, we can provide our clients with the management summary and the Statement of Applicability (SoA).

ISO 45001

ISO 45001 helps organizations improve the safety and health of their employees through a structured approach to risk management and regulatory compliance. Bureau Veritas Cybersecurity Europe is certified to ISO 45001:2018, demonstrating that we meet the highest standards for occupational health and safety. This assures our clients that we take the safety and well-being of our employees seriously and take proactive steps to minimize risks.

NEN 4400-1

Bureau Veritas Cybersecurity Europe is certified under NEN 4400-1. This certification demonstrates that we comply with strict standards for labor and tax administration. NEN 4400-1 is a recognized standard in the Netherlands that ensures companies meet their obligations regarding payroll taxes and employee identity verification. For our clients, this provides the assurance that we operate in a transparent, responsible manner and in full compliance with Dutch laws and regulations.

SOC 2

Bureau Veritas Cybersecurity North America has a SOC 2 report. This demonstrates that we meet strict standards for the security, availability, and confidentiality of customer data. SOC 2 is an internationally recognized framework developed by the American Institute of CPAs (AICPA). It provides our customers with the assurance that we handle their data with care and in accordance with best practices in risk management, system integrity, and data protection.

CREST

Bureau Veritas Cybersecurity Europe is a member of CREST for penetration testing and vulnerability scanning. This means we now offer CREST-approved testing, specifically for the international market. CREST is an independent, nonprofit organization that sets professional standards for penetration testing. It gives our clients the assurance that certain quality requirements are met, including risk management, test coverage, reporting, and the security of your data.

CCV PENTESTING LICENSE NL

Secura was the first penetration testing company in the Netherlands to be certified under the CCV certification mark. This penetration testing certification mark demonstrates the expertise and assurance that Bureau Veritas Cybersecurity Europe has to offer. This certification mark is comparable to the CREST certification mark but is tailored to the Dutch market.

UNECE R155/R156

These regulations pertain to the cybersecurity of vehicles (cars and trucks). The RDW must approve all vehicles used on public roads, and they must comply with the UNECE R155 and R156 standards. This standard pertains to the cybersecurity of software updates and connected-car telemetry. The RDW officially recognizes Bureau Veritas Cybersecurity Europe as a testing laboratory for UNECE R155 and R156 evaluations under approval authority E49.

BSPA

(Certificate available upon request)

BSPA is a program established and managed by the AIVD, focused on the security needs of the Dutch government (and, in exceptional cases, private organizations and the business sector). Bureau Veritas Cybersecurity Europe is a BSPA testing laboratory supervised by the National Bureau for Communication Security.

COMMON CRITERIA

(Certificate available upon request)

Common Criteria (CC) is one of the best-known and internationally recognized certification programs for the evaluation of IT products. The evaluation and certification process is based on the CC standard, which sets out clear requirements for the preparation and assessment of products within its scope. Bureau Veritas Cybersecurity Europe offers Common Criteria evaluation services under the Dutch CC scheme—NSCIB.

PRIVATE INVESTIGATION AGENCY (POB)
 

To conduct digital forensic investigations, Bureau Veritas Cybersecurity Europe holds a POB license under the Act on Private Security Organizations and Investigation Agencies (WPBR) with license number POB09262. Among other things, this guarantees that personal data is handled securely and that forensic evidence produced by Bureau Veritas Cybersecurity Europe is admissible in criminal cases or legal proceedings.