ISO 27701

From Information Security to Privacy: Strengthening Comprehensive Protection

Before obtaining ISO 27701 certification, DIGITIMES had already completed the implementation and certification of ISO 27001, including:

• Multiple security testing mechanisms, including code inspection, vulnerability scanning, and penetration testing
• Simulated hacker intrusion testing to verify defense effectiveness without affecting service operations

Although DIGITIMES already has a comprehensive information security mechanism in place, we continue to strengthen privacy protection. To safeguard the personal data of its broad membership base and event participants, DIGITIMES further introduced the ISO 27701 Privacy Information Management standard. This system is especially important for organizations that process large volumes of personal data, making data processing procedures more transparent and compliant.

Establishing a Highly Trusted Governance Framework

DIGITIMES services are centered on data integration and convergence. We have established an ISMS (Information Security Management System) and PIMS (Privacy Information Management System) to ensure our governance framework meets international standards. At the same time, DIGITIMES’ Information Security and Personal Data Management Committee formulates policies and combines them with multi-layered protection measures to form a defense-in-depth architecture, implement best practices, and enhance trust.

Actively Moving Toward a New Generation of AI Services

Looking ahead, DIGITIMES will continue to expand its AI and digital service applications. While advancing information development and innovation, DIGITIMES will maintain strict oversight of information security and privacy. Through dual ISO 27001 and ISO 27701 certification, DIGITIMES can effectively defend against information security attacks and provide members with a secure and trusted service experience.