CIRA is proud to announce it has achieved recertification to ISO/IEC 27001:2022, an internationally recognized standard for managing information security and risk.
The recertification covers information security related to the managed services supporting the CIRA Registry system, Domain Name System (DNS) services and the CIRA XDR product, including supporting operations and infrastructure, the protection of client and organizational information, development processes, product source code and related assets.
“As technology evolves, maintaining trust is becoming increasingly challenging as risks become more complex, interconnected and visible to customers, partners and regulators,” said Jason Gallaugher, Chief Technology and Security Officer at CIRA. “ISO 27001 is a clear signal of trust, and achieving this certification reaffirms CIRA’s commitment to protecting our information, managing risk and continually evolving our security posture.”
Independent audit highlights “noteworthy efforts”
An independent expert in assurance and risk management completed the full recertification audit of CIRA, noting zero non-conformities and multiple “noteworthy efforts,” including:
- Thorough and innovative monitoring methods to protect systems
- Mature, well-defined and maintained software development lifecycle and processes
- Meticulously maintained ISMS, policies, standards and process documentation
“Our recertification reflects the commitment of everyone at CIRA,” said Gallaugher. “It demonstrates that our people, processes and technology continue to meet the highest international standards so our customers, partners and Canadians can have confidence that our core technology, infrastructure, data and platforms are safe, stable and secure.”
CIRA plays a critical role in supporting Canada’s sovereign internet infrastructure. From managing the .CA domain and operating globally distributed DNS and registry services to serving as a trusted cybersecurity partner to organizations across Canada, the organization holds itself to the highest standards of security, reliability and trust.
Learn more about CIRA’s robust legal framework and policies here.
