Does Civi CRM have ISO 27001?

And is it compliant with ISO 27002 and ISO 27017?


The standards you reference all relate to information security infrastructure and processes. It doesn't look to me like they apply directly at the application layer.

CiviCRM is going to rely on the security of the underlying platform (LAMP stack) and how it's managed. I suggest you rephrase your question with a specific concern about CiviCRM.

| improve this answer | |
  • Thanks for this Dan - good to understand where ISO27001 does and doens't apply. – James Harper Aug 10 '16 at 13:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.