Telviva earns ISO/IEC 27001:2022 certification for information security - Antony Russell — The author, Telviva CTO Antony Russell

Telviva has achieved ISO/IEC 27001:2022 certification, an important step in its commitment to information security. The company’s path towards certification began five years ago, prompted by a client who required a rigorous security audit.

As more organisations seek business partners that are ISO-certified or aligned, Telviva undertook this multi-year effort to secure the certification, which demonstrates that corporate and customer data remains secure, accessible and fully protected. The aim is to build trust with customers and commercial partners by demonstrating a verified ability to manage and store their information properly.

ISO/IEC 27001:2022 is the globally recognised standard for information security management systems (ISMS), and is fundamentally about operational consistency: “writing down what you do and doing what you write down”.

The wide-reaching standard requires an enterprise to establish clear policies and processes spanning access control, asset management, business continuity, disaster recovery, human resources and risk assessment. It also requires formal change management, IT operations guidelines covering incident management, mobile device policies, remote working guidelines, information classification and handling protocols, and secure coding policies for internally developed software. Preparing for certification required significant effort and financial investment across the entire organisation.

Looking for an ISO-certified business communications partner you can trust? Contact us today.

Key controls for ISO certification

The updated ISO/IEC 27001:2022 standard incorporates 93 controls organised into four thematic categories:

Organisational controls: Cover overall policies, identity management, asset classification and the return of assets.
People controls: Encompass remote working guidelines, thorough employment screening and confidentiality agreements.
Physical controls: Focus on security perimeters, physical facilities monitoring, equipment protection and the secure disposal of assets.
Technological controls: Focus on access control, cryptography, endpoint protection and cloud security.

Practical changes implemented at Telviva

To ensure a smooth transition, Telviva implemented its operational changes incrementally over three years. Among the main improvements were the formalisation of change management procedures and the deployment of mobile device management to track authorised devices accessing the network.

To guard against cyber threats, the company introduced daily vulnerability scanning in partnership with a security vendor, alongside regular penetration testing to identify and address issues early. These technical measures were strengthened through employee security awareness training, updated remote working guidelines and stricter device security practices, making Telviva a far more secure environment.

Securing ISO/IEC 27001:2022 certification has substantial advantages for both Telviva and its clients. While certification does not eliminate vendor security questions during request for proposal (RFP) processes, it provides a structured framework that serves as an easier, trusted starting point. Existing and prospective clients immediately know that Telviva maintains – and rigorously enforces – verified policies on information security management.

For customers, knowing that their data is stored in a systematically protected environment provides peace of mind and reassures them that their valuable assets are safeguarded. Above all, opening up operations to rigorous external evaluation continually reinforces customer trust.

Continuous improvement

The ISO/IEC 27001:2022 certification is valid for three years and is supported by annual surveillance audits. An organisation cannot simply achieve certification and rest on its laurels, as a central pillar of ISO standards is continuous improvement.

Telviva drives ongoing progress by holding quarterly ISO meetings among senior leaders in the company to evaluate metrics and operational reports, and to identify and implement improvements. During each annual surveillance audit, external auditors assess these documented enhancements, probing progressively deeper over the three-year cycle.

This culture of continuous evaluation ensures that Telviva consistently practises what it documents, maintaining a strong security posture and preserving long-term customer trust.

Looking for an ISO-certified business communications partner you can trust? Contact us today.

About Telviva
Telviva is a provider of cloud-based communications that aims to enable better-quality conversations for businesses through context-driven unified communications as a service (UCaaS) and contact centre as a service (CCaaS). Integrating voice calls, private branch exchange (PBX), video conferencing, instant messaging, contact centre and business intelligence into a single service, Telviva simplifies collaboration, boosts productivity and enhances customer experiences. Delivered as a managed service, the secure solution integrates with customer relationship management (CRM) systems and other cloud tools, providing historical context for informed interactions. For more, visit www.telviva.co.za.