BCA Achieves ISO 27001:2022 International Standard Certification for Data Information Security Management

Jakarta, December 13, 2024 -has achieved ISO 27001:2022 certification, reaffirming its commitment to protecting customer data and maintaining the highest standards of information security. BCA secured the ISO 27001:2022 certification following a rigorous assessment of its information security management system conducted by PT SGS Indonesia.

ISO 27001:2022 is an international standard for Information Security Management System (ISMS). ISO certification involves a comprehensive evaluation process covering various aspects, including security policies, risk management, and threat mitigation related to information security.. These measures are implemented to evaluate the system, ensuring it meets the required standards, particularly in safeguarding the security, confidentiality, and integrity of customer data.

BCA Vice President Director Hendra Lembong said, “For BCA, customer data security is a top priority, we always ensure that our information security management system meets international standards. One of our efforts is through ISO 27001:2022 certification, which ensures that the data and information we manage remains safe, protected from threats, and available when needed. This certification is also part of our strategy in facing cybersecurity challenges in the digital era, while encouraging the development of secure and sustainable technology in the financial sector.”

After a series of analyses and observations, BCA was assessed to have implemented, maintained, developed, and been able to improve its information security management system against threats, both internal and external. The risk assessment and audit report affirm that BCA has demonstrated robust efforts to ensure all operational processes and digital banking services adhere to the highest security standards, as outlined in ISO 27001:2022

Previously, BCA's efforts in creating information security management have also been recognized and certified. BCA has achieved ISO 20000:1-2018 certification related to data center service management systems and Information Technology (IT) operations management, as well as Threat, Vulnerability, and Risk Assessment (TVRA) for data centers. In addition, BCA has also obtained PCI DSS certification related to securing credit card transactions.

Photo Information:

Committed to Safeguarding Customer Data, BCA Achieves ISO 27001:2022 Certification - BCA Director Hendra Lembong (left), Senior EVP Group Strategic IT David Formula (second right), and Lily Wongso (right) receive ISO 27001:2022 certification from Knowledge Director PT SGS Indonesia Waras Putri Andrianti (second left) at Menara BCA, Thursday (12/12). The certification reflects BCA's unwavering commitment to safeguarding customer data. The ISO 27001:2022 certification was awarded to BCA following a rigorous assessment process conducted by PT SGS Indonesia on the company's information security management system.