Green Ribbon Achieves ISO/IEC 27001 Certification

Green Ribbon, an insurtech company based on insurance and medical data, has obtained ISO/IEC 27001 certification, the international information security management system standard.

ISO/IEC 27001 is an international standard for information security jointly developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It assesses and certifies whether an organization has a management system in place to systematically protect its information assets. It verifies the operational level of all aspects of information security, including information security policy formulation, risk management, access control, incident response, and continuous improvement activities, against international standards.

With this certification, Green Ribbon has been officially recognized for its information security management capabilities in the highly data-sensitive insurance and healthcare sectors, including insurance claims, insurance analysis, and medical data integration. Given the nature of its services, which involve handling personal information and insurance and healthcare data, information security and reliability are crucial factors. This certification is expected to contribute to enhancing service stability and reliability.

In preparation for certification, Green Ribbon enhanced its information asset identification and risk assessment system and reorganized internal security policies and operational processes company-wide. Furthermore, it enhanced its overall security level by providing information security training to employees, strengthening access rights management, and establishing an incident response process.

The company plans to use this certification as an opportunity to continuously improve its information security management system and grow into a trustworthy insurtech platform for customers and partners.


  • See more related articles