ISO/IEC 27001:2022 successfully recertified and the ISMS extended to include cloud security and data protection

Information security is a key feature of our services. Since 2019, we have been operating a certified ISMS, which is regularly audited to ensure that stepping stone AG’s processes consistently meet the requirements of the relevant standard. On the 22nd of October 2026, the annual surveillance audit was successfully completed. The audit confirmed that our ISMS continues to meet the current requirements of ISO/IEC 27001:2022.

This year’s audit marked a special occasion: for the first time, we also sought certification to the two additional standards, ISO/IEC 27017 and ISO/IEC 27018 and successfully passed this audit as well.

ISO/IEC 27017 supplements ISO/IEC 27001 with additional security measures and best practices for cloud service providers. The standard helps to clearly define security responsibilities and to offer cloud services in accordance with recognised international standards. For a provider of Swiss cloud infrastructure, this supplement is the logical next step in underpinning security in the cloud with international benchmarks.

ISO/IEC 27018 extends ISO/IEC 27001 to include specific requirements for the protection of personal data (Personally Identifiable Information, PII) in cloud environments. The aim is to ensure transparency in the processing of personal data, as well as consistently enhanced data protection and privacy. This complements our existing measures for data protection and information security.

These additions show our commitment to upholding the highest standards in cloud security and the protection of personal data. This specifically strengthens our ISMS in the areas of cloud computing and data protection. The ISMS policies apply to all employees, to all third parties carrying out work on behalf of stepping stone AG and to all customers and visitors.

Do you have any questions about certification or our information security measures? Our CISO will be happy to advise you on +41 31 332 53 63 or at ciso(at)stepping-stone(dot)ch.