Frequently asked questions about ISO/IEC 27799
Frequently asked questions about ISO/IEC 27799
What's ISO/IEC 27799?
ISO/IEC 27799 provides guidelines on how organizations in the healthcare industry can better protect the confidentiality, integrity, traceability, and availability of personal health information.
Huawei Cloud is the world's first cloud service provider to earn ISO/IEC 27799 certification. This certifies Huawei Cloud's deep understanding of intelligent applications for the healthcare industry, and its ability to protect the security of personal health information.
In addition, Huawei Cloud invites third-party organizations to periodically review its information security management systems based on changing conditions, so Huawei Cloud always stays at the forefront of personal health information protection.
Which data centers are covered by Huawei Cloud's ISO/IEC 27799 certification?
The ISO/IEC 27799 certification covers over 40 data centers belonging to Huawei Cloud globally, plus operation and maintenance services for them, including the provision of operation and maintenance services for Huawei Cloud data centers based on third-party IDCs, as well as those for Huawei Cloud's self-built data centers. You can download Huawei Cloud's ISO/IEC 27799 certificate from Compliance Certificates.
Which Huawei Cloud services are covered by ISO/IEC 27799 certification?
The ISO/IEC 27799 certification covers over 150 Huawei Cloud services including, but not limited to, Advanced Anti-DDoS (AAD), Web Application Firewall (WAF), Data Encryption Workshop (DEW), and Database Security Service (DBSS). You can download Huawei Cloud's ISO/IEC 27799 certificate from Compliance Certificates.
If you would like to learn more about our products, please contact us.
Can my organization become ISO/IEC 27799-certified automatically by using Huawei Cloud?
Although Huawei Cloud has earned ISO/IEC 27799 certification and provides you with secure and reliable cloud services on this basis, using services provided by Huawei Cloud does not certify your organization's compliance with ISO/IEC 27799. ISO/IEC 27799 certification requires us to establish, implement, maintain, and continuously improve the information security management system of our organizations based on the ISO/IEC 27799 guidelines, standards, and best practices. You can invite an independent third-party certifying body to assess your own system and acquire certification for your organization.