LINX achieves ISO 27001:2022 for security excellence

The London Internet Exchange (LINX) has achieved recertification for the ISO/IEC 27001:2022 standard, upholding the highest operational and security standards.

ISO/IEC 27001:2022

ISO/IEC 27001:2022, known as ISO 27001, is an internationally recognised standard that outlines the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).  

LINX had its first audit back in September 2021 after observing a shift in the traditional customer or member base to increasingly more inquiries from networks within the enterprise and financial sector, where accreditations like this are vital. The decision for LINX to transition to the 2022 version demonstrates the desire to uphold the highest operational and security standards across the organisation.

Information and data security

Commenting on this achievement, LINX CTO Richard Petrie said, "We are delighted to achieve recertification for ISO 27001, which underscores our ongoing commitment to information security."

"This achievement reflects our dedication to not only our engineering excellence but also protecting the interests of our members and stakeholders by upholding the highest standards of data security."

Manage and mitigate risks

LINX underwent a rigorous audit process conducted by the BSI to validate its compliance

LINX underwent a rigorous audit process conducted by the British Standards Institution (BSI), an accredited certification body, to validate its compliance with ISO 27001:2022 standards across all operational areas.

The recertification confirms LINX's capability to manage and mitigate information security risks effectively, ensuring the resilience and reliability of its services in an increasingly interconnected digital landscape. 

Risk management strategy

The cost of not having an effective Information Security Management System can be high – both financially and reputationally.

The standard is a critical component in any organisation’s risk management strategy, and it has become an essential part of many organisations’ IT governance, risk, and compliance (GRC) programmes.