Cyber Security Brunei Achieves ISO Certification

Picture above: Representatives of ITPSS Sdn Bhd, Cyber Security Brunei, and CyberSecurity Malaysia with Shamsul Bahri Haji Kamis, Interim Commissioner of CSB.

Cyber Security Brunei (CSB), the national cyber security agency which operates under the Ministry of Transport and Infocommunications, has been recognised for achieving international standards for  Information Security Management System (ISMS).

Following a two-stage audit from October to December last year, CSB was formally awarded the ISO/IEC 27001:2013 certification recently by the Information Security Certification Body of CyberSecurity Malaysia, which provides certification services based on international standards and guidelines, focusing on information security.

The audit included reviews on whether Cyber Security Brunei’s ISMS policies and procedures meet the globally recognized framework in the security management of data assets. The key objective of ISO 27001 is to ensure the confidentiality, integrity, and availability of critical data assets.

Cyber Security Brunei is now certified as compliant to international standards in Information Security Management System (ISMS) for delivering professional cyber security services and operated by ITPSS Sdn Bhd. These services comprise of CSB’s three core services Brunei Computer Emergency Response Team (BruCERT), National Digital Forensics Laboratory (NDFL) and Cyber Watch Centre (CWC).

In addition to being the first agency in Negara Brunei Darussalam to achieve the certification, CSB’s National Digital Forensics Laboratory had also successfully attained the ISO/IEC 17025:2017 accreditation in the field of Forensic Testing from the American National Standards Institute National Accreditation Board last year. Thus far, it is the only digital forensics laboratory in Negara Brunei Darussalam and among only a select few in South-East Asia to obtain such a standard. This will enhance NDFL’s capabilities in its endeavour to provide quality and trustworthy digital forensics and cybercrime investigation to the law enforcement community and other relevant organisations in the country.