Information technology

TÜV NORD Vietnam audits and certifies management systems in information technology: information security, cloud security, personal data protection, IT service management, business continuity and artificial intelligence.

Information security – the foundation of digital transformation

As business processes, customer data and production systems rely more and more on digital infrastructure, a data leak or system outage can cause serious financial, legal and reputational damage. Partners, customers and regulators therefore increasingly expect objective evidence that an organisation keeps its information risks under control.

Independent third-party certification against international standards is a widely recognised way to provide that evidence. As a member of TÜV NORD GROUP, TÜV NORD Vietnam provides independent audit and certification services, from the initial certification audit to surveillance and recertification audits.

Standards we audit

ISO/IEC 27001 – information security management systems (ISMS) for any type of organisation.
ISO/IEC 27017 and ISO/IEC 27018 – guidance and additional controls for cloud security and for protecting personal data in public clouds, assessed together with ISO/IEC 27001.
ISO/IEC 27701 – privacy information management systems (PIMS); a standalone management system standard since the 2025 edition.
ISO/IEC 20000-1 – IT service management systems.
ISO 22301 – business continuity management systems (BCMS).
ISO/IEC 42001 – artificial intelligence management systems (AIMS).
TISAX® – information security assessments for the automotive supply chain; the result is a TISAX® label exchanged via the ENX platform, not a certificate.

Combined and integrated audits

The management system standards ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 20000-1, ISO 22301 and ISO/IEC 42001 share ISO's common high-level structure (Annex SL / Harmonized Structure), so they can be audited in a combined or integrated programme, including alongside ISO 9001 or ISO 14001. This can reduce duplicated documentation, save your internal team's time and give a holistic view of your management system. TISAX® assessments follow their own process defined by ENX.

Our services

ISO/IEC 27001 CertificationISO 27001:2022 certification for your information security management system (ISMS) to protect the confidentiality, integrity and availability of data.ISO/IEC 27701 CertificationISO 27701:2025 certification for your privacy information management system (PIMS), helping controllers and processors evidence personal data protection.ISO/IEC 20000-1 CertificationISO 20000-1 certification for your IT service management system (SMS) helps IT service providers demonstrate service quality, reliability and control.ISO 22301 CertificationISO 22301:2019 certification for your business continuity management system (BCMS), confirming that your ability to continue and recover is managed.TISAX® AssessmentTISAX assessment against the VDA ISA catalogue for automotive suppliers: results are TISAX labels exchanged via the ENX platform at carmakers' request.

Benefits for your organisation

Customer trust

A certificate issued by an independent body is objective evidence that your management system conforms to an international standard.

Risk control

A risk-based approach helps you identify and address threats to data and systems early.

Edge in tenders

Many customers and international groups require suppliers to hold information security certification or a TISAX label.

Continual improvement

Findings from regular audits give you objective input for improving your management system with every audit cycle.

Frequently asked questions

Which standard should we start with?

For most organisations ISO/IEC 27001 is a common starting point; it is also the basis for assessing ISO/IEC 27017 and ISO/IEC 27018. Since the 2025 edition, ISO/IEC 27701 can be certified on its own or integrated with ISO/IEC 27001. IT service providers often also consider ISO/IEC 20000-1, while automotive suppliers are usually asked by their customers for a TISAX assessment.

Can several standards be audited together?

Yes. ISO management system standards have a similar structure, so they can be audited together in one combined audit. The exact scope and plan are agreed based on your size, number of sites and the complexity of your management system.

How do we request a quotation?

Contact a TÜV NORD Vietnam office in Hanoi, Ho Chi Minh City or Vung Tau, or email vietnam@tuv-nord.com with details of your scope of activities, number of employees and sites. Our specialists will discuss your needs before sending a tailored proposal.

Talk to our experts

Contact TÜV NORD Vietnam in Hanoi, Ho Chi Minh City or Vung Tau for detailed information on Information technology and a quotation for your organisation.