Certification of Management Systems

  

In 2022, the National Bureau of Statistics (NBS) obtained certificates of conformity with the ISO/IEC 27001:2013 standard on information security and the ISO/IEC 27701:2019 standard on the protection of personal/confidential data, following the successful completion of audits in the relevant areas. The ISO/IEC 27001 and ISO/IEC 27701 standards define the requirements for an information security management system and for the protection of personal data, ensuring confidentiality, integrity, and availability of information.

It should be noted that, as of January 2024, it was confirmed that the management system for the protection of personal data, confidentiality, integrity, and availability of information complies with the requirements of these standards, with best practices being applied for the maintenance and continuous improvement of information systems and information security.

By obtaining these certifications (in the field of “Production of Official Statistics”), it is confirmed that the data security and protection measures implemented—especially in the recent period—by the NBS have reached a level at least equal to the ISO/IEC 27001 and ISO/IEC 27701 standards, applying best practices in the planning, installation, configuration, use, and maintenance of information systems, the maintenance and improvement of information security, and the assurance of data protection.