Fortivin platform
Trust & Compliance
Standards reference

ISO/IEC 27001

ISO/IEC 27001 specifies requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).

Reference scope

What it covers

The standard defines a risk-based management system for information security, with Annex A controls covering organizational, people, physical, and technological areas. Certification applies to a defined ISMS scope, not to a company in general.

Fortivin context

How it relates to the platform

The architecture brief describes intended controls for access management, tenant isolation, audit logging, and operations. Those design descriptions could inform a future ISMS scope; they are not evidence of a certified management system.

Status statement

This page is a standards reference only. No Fortivin ISO/IEC 27001 certification is claimed.

ISO/IEC 27001 — Information security management