Certificates

Information processing plays a key role in the fulfilment of VDI/VDE-IT’s remit. As a service provider, handling confidential information is part of our day-to-day business. This applies across the board to all areas and business sectors, such as project management, studies, evaluation, administrative offices, liaison offices, consultancy and regional development. VDI/VDE-IT therefore maintains an Information Security Management System (ISMS) in conjunction with its subsidiary, FILINA Innovation + Technik GmbH, Frankfurt (Oder). The aim of the ISMS is to define, monitor, maintain and continuously improve information security across the group of companies.

The management system was first certified in October 2014 by TÜV NORD CERT GmbH in accordance with the internationally recognised standard ISO/IEC 27001. The scope of the management system and the certification covers all sites and all business areas; the most recent evidence of the maintenance and further development of the ISMS was provided in October 2025.

However, we are deliberately taking this a step further: the responsible handling of personal data – both in our capacity as a data controller and as a data processor within the meaning of data protection legislation – is also of paramount importance to VDI/VDE-IT. To ensure this is implemented systematically in the interests of all data subjects – and thus in accordance with the General Data Protection Regulation – whilst also creating significant synergies with information security, we apply ISO 27701:2025 as the standard for data protection management. In practical terms, this avoids duplicate structures alongside the ISMS and ensures that processes are implemented in an integrated manner.

Upon request, we provide further documentation such as the security policy and the statements of application (relating to the management systems ISO 27001:2022 and ISO 27701:2025), including explanations of the control measures implemented and regarding NIS 2 compliance.