Bureau Veritas Latin America Achieves ISO 27001 and Solidifies Expertise in Data Protection

With Implementation of the Information Security Management System in Eight Countries, BV Latin America is the First Operational Group to Receive Certification at Scale

As a global leader in Testing, Inspection and Certification (TIC), Bureau Veritas innovates by implementing an Information Security Management System (ISMS) in eight countries simultaneously. Standardization at scale, with strict controls and levels of excellence, has earned the Latin America Operational Group the ISO 27001 certification, an international standard that assures commitment to confidentiality, integrity, and protection of the vast amount of data received from clients, investors, and employees. The initiative also strengthens the Group’s positioning in the market. According to ISO, only 28,416 companies worldwide achieved the 27001 certification in 2022.

 “With the advancement of digitalization, we deal daily with cyber threats and our teams work continuously to mitigate them and ensure data integrity across all our business areas. Obtaining ISO 27001 is a recognition of our work and our dedication to developing increasingly reliable and efficient solutions,” says Ricardo Villagelin, CIO of Bureau Veritas Latin America.

 The certification process for Bureau Veritas Latin America had Brazil as the host country for implementing the standard, with audits in Argentina, Chile, Mexico, Colombia, Ecuador, Panama, and Peru. Compliance with all requirements, processes, and controls mandated by ISO 27001 was verified, related to risk mitigation and management, proactive threat detection, and the security of IT systems and environments.

 The implementation of Information Security systems in countries with different regulations and cultures was a complex and challenging process. Since 2019, Villagelin has led the project for modernization and standardization of the ISMS, based on the scope of the National Institute of Standards and Technology (NIST), which was crucial in paving the way for international certification.

 Increasingly common, cyberattacks are evolving with the advancement of digitalization and the emergence of new technologies. In 2022, there were 360 billion incidents reported in Latin America and the Caribbean, with 103 billion occurring solely in Brazil, making it the second most targeted country in the region, behind only Mexico, which reported 187 billion cases. The standardization and certification of the ISMS ensure that Bureau Veritas has greater control over the vast volume of data received daily across all its business areas and further strengthens its position as a global leader in Testing, Inspection, and Certification (TIC), as the Group is also accredited by ISO to certify other companies with the standard.

With a global revenue of €5.7 billion, Bureau Veritas is a global leader in Testing, Inspection, and Certification (TIC). Founded in 1828, the Group operates in 140 countries, serving over 400,000 clients. There are 80,000 employees located in more than 1,600 offices and laboratories worldwide, with over 6,000 professionals in Brazil. Bureau Veritas offers a complete portfolio of services and innovative solutions to ensure that assets, products, infrastructure, and processes meet quality, health and safety, environmental protection, and social responsibility standards and regulations.