DigiCert Achieves Latest ISO/IEC Security Standard
The certification validates security processes for the company's global certificate management infrastructure.
Updated on Oct. 26, 2026 in Cybersecurity
Live Poll
Does an independent security certification make you trust a technology provider more?
DigiCert has achieved ISO/IEC 27001:2022 certification for its information security management system (ISMS). This certification covers the company's issuance and management of digital certificates and its broader Public Key Infrastructure (PKI) operations across 11 countries and remote workforces.
Why it matters
Achieving this updated standard confirms that DigiCert's security controls meet current international benchmarks for managing digital trust assets. It formalizes compliance for an entity serving 90% of Fortune 500 companies, ensuring their infrastructure adheres to rigorous, audited security frameworks.
The audit, performed by MSECB, evaluated DigiCert against the ISO/IEC 27001:2022 standard. This certificate complements existing operational standards maintained by the company, including SOC 2 Type II and WebTrust for Certification Authorities.
The players
DigiCert
A provider of digital trust services including SSL/TLS certificates and PKI management for enterprise-scale security.
MSECB
An independent certification body that conducts audits against international standards for management systems.
The details
The ISMS is a systematic approach to managing sensitive company information so that it remains secure, encompassing people, processes, and IT systems. Auditors verified that DigiCert's controls for issuing and managing digital certificates—files that verify the identity of a website or entity—align with these international requirements. The certification mandates ongoing surveillance audits to ensure the effectiveness of these security policies over time.
Timeline
October 26, 2026: DigiCert announced the achievement of its ISO/IEC 27001:2022 certification.
The Tech Race
Certification to the 2022 iteration of the ISO/IEC 27001 standard represents the current benchmark for security management across the global PKI industry. It keeps DigiCert aligned with international compliance expectations as rivals transition from older framework versions.
Enterprise users relying on DigiCert for secure communications benefit from this validated audit, which reduces the need for independent security vetting. This certification is now in effect, with ongoing surveillance audits required to maintain the current status.
The takeaway
This certification signals that DigiCert's core PKI infrastructure has successfully cleared a current, globally recognized security review. Stakeholders should monitor for subsequent surveillance audit announcements, which will confirm the continued effectiveness of the managed security controls.
Further reading
For broader trends in digital identity verification, see our latest analysis in Cybersecurity.
Live Poll
Does an independent security certification make you trust a technology provider more?
