On May 8, the official TikTok website announced recently that TikTok has officially obtained the ISO 27001 information security management system certification in the United States and the United Kingdom.

TikTok Chief Information Security Officer Roland Cloutier said that an independent third-party organization has completed this certification after a series of rigorous reviews, confirming that TikTok's security and risk control meet the highest standards.

It is reported that the ISO 27001 system is one of the most highly recognized information security standards in the world. Many services under technology companies such as Facebook and Google have passed this certification.

ISO 27001 sets requirements on both the information security management system and implementation rules, and provides best practices and specific guidance suggestions for enterprises in establishing an information security management system (ISMS).

During the certification process, the review agency conducted a comprehensive assessment of the TikTok platform's infrastructure, development, operation and services. Specifically, it includes the following three aspects: first, to verify whether TikTok's Information Security Management System (ISMS) can effectively protect data security; second, to verify whether a series of TikTok security management measures comply with best practices; third, to verify whether TikTok's series of security management measures comply with best practices; third, to verify whether TikTok's information security management system (ISMS) can effectively protect data security; Teams of technology, legal affairs, privacy and human resources conduct inspections to evaluate cross-departmental collaboration capabilities and information security risk management awareness.

TikTok's statement stated that obtaining ISO information security management system certification reflects TikTok's efforts to protect user information security, including its long-term investment in personnel, processes, and technology.

Roland Cloutier said that obtaining ISO 27001 certification is an important step for TikTok to ensure information security. TikTok will always be committed to promoting and improving information security, ensuring community information security, and leading the development of the industry.

Source: NetEase Technology Report, translated by Google Translate