INFORM successfully recertified according to new ISO/IEC 27001:2022
Jun 30, 2025
Information security remains a key issue at INFORM - and systematically so: the Aachen-based software company has successfully passed recertification in accordance with the updated international standard ISO/IEC 27001:2022 by TÜV Rheinland.


“With the recertification according to the new version of ISO 27001:2022, INFORM shows that the company fulfills established security standards in accordance with the requirements of the standard and has continuously developed further,” explains Ralph Freude, Head of businessline ict at TÜV Rheinland Cert GmbH. “The updated standard places the highest demands on companies - INFORM meets these with clearly structured processes and established risk management.”
The international standard ISO/IEC 27001 defines requirements for a systematic information security management system (ISMS) and is the globally recognized standard for securing sensitive data and IT infrastructures. With the re-certification, INFORM underlines its own claim to permanently fulfill and further develop the highest requirements for information security.
“Passing the recertification process confirms our continuous improvement approach - a central pillar of ISO 27001,” emphasizes Daniel Blankertz, Chief Information Security Officer at INFORM. “Since then, we have further developed our ISMS in technical, organizational and procedural terms and see the implementation of the updated standard as another milestone on the way to a future-proof security architecture.”
INFORM is continuously developing its ISMS, taking into account new regulatory requirements, particularly those of the EU, as well as growing customer needs. The current recertification takes into account INFORM's ongoing transformation into a SaaS provider. Targeted measures ensure that security management not only meets current standards, but also meets future requirements.
INFORM will continue to consistently pursue this path in the future - with the clear goal of anchoring information security not just as a duty, but as a living component of the corporate strategy.