ServiceNow Achieves ISO27701 and APEC PRP Certification
February 22, 2021
Share this

ServiceNow attained both the International Organisation for Standardisation’s ISO27701 and Asia‑Pacific Economic Cooperation Privacy Recognition for Processors (APEC PRP) Certifications.

Building on its already robust and mature privacy, security and compliance processes, these certifications further assist ServiceNow in achieving the highest standard of data privacy protections. The latest announcement, along with previously achieved certifications including ISO 27001 and SOC 2, enhance the global data privacy posture of the ServiceNow enterprise cloud offering.

The certifications are an important milestone as ServiceNow continues to scale and build customer and partner trust. The achievement of these certifications highlights ServiceNow’s commitment to privacy, through complying with new and evolving digital privacy and safety mandates.

ISO 27001 improves and maintains the safeguarding of data. It acts as a privacy extension to the International Organisation for Standardisation’s international information security management standards, ISO/IEC 27001 and ISO/IEC 27002.

As an international management system standard, ISO27701:

- Demonstrates compliance with privacy regulations around the world, including GDPR

- Streamlines privacy controls to reduce the risk to the privacy rights of individuals

- Underlines ServiceNow’s best in practice security posture, protecting the organization from information security breaches

- Specifies the requirements for establishing, implementing, maintaining and continually improving a PIMS (Privacy Information Management System)

- Provides guidance on the protection of privacy, including how organizations should manage personal information

APEC PRP puts ServiceNow among a small group of organizations which have established robust programs to support compliant cross‑border data transfers.

The APEC PRP framework:

- Allows data processors to demonstrate their ability to provide effective implementation of a data controller’s privacy obligations under the APEC Cross‑Border Privacy Rules (APEC CBPR)

- Gives data controllers the ability to identify qualified, accountable data processors

- Highlights ServiceNow’s commitment to servicing the Asia‑Pacific Economic Cooperation region, comprising of countries across Asia, Australia, and the Americas

As ServiceNow continues to evolve and expand its’ continued protection of customer and user data, meeting privacy management standards remains central to its wider privacy and data compliance program.

Share this

The Latest

April 19, 2024

In MEAN TIME TO INSIGHT Episode 5, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses the network source of truth ...

April 18, 2024

A vast majority (89%) of organizations have rapidly expanded their technology in the past few years and three quarters (76%) say it's brought with it increased "chaos" that they have to manage, according to Situation Report 2024: Managing Technology Chaos from Software AG ...

April 17, 2024

In 2024 the number one challenge facing IT teams is a lack of skilled workers, and many are turning to automation as an answer, according to IT Trends: 2024 Industry Report ...

April 16, 2024

Organizations are continuing to embrace multicloud environments and cloud-native architectures to enable rapid transformation and deliver secure innovation. However, despite the speed, scale, and agility enabled by these modern cloud ecosystems, organizations are struggling to manage the explosion of data they create, according to The state of observability 2024: Overcoming complexity through AI-driven analytics and automation strategies, a report from Dynatrace ...

April 15, 2024

Organizations recognize the value of observability, but only 10% of them are actually practicing full observability of their applications and infrastructure. This is among the key findings from the recently completed Logz.io 2024 Observability Pulse Survey and Report ...

April 11, 2024

Businesses must adopt a comprehensive Internet Performance Monitoring (IPM) strategy, says Enterprise Management Associates (EMA), a leading IT analyst research firm. This strategy is crucial to bridge the significant observability gap within today's complex IT infrastructures. The recommendation is particularly timely, given that 99% of enterprises are expanding their use of the Internet as a primary connectivity conduit while facing challenges due to the inefficiency of multiple, disjointed monitoring tools, according to Modern Enterprises Must Boost Observability with Internet Performance Monitoring, a new report from EMA and Catchpoint ...

April 10, 2024

Choosing the right approach is critical with cloud monitoring in hybrid environments. Otherwise, you may drive up costs with features you don’t need and risk diminishing the visibility of your on-premises IT ...

April 09, 2024

Consumers ranked the marketing strategies and missteps that most significantly impact brand trust, which 73% say is their biggest motivator to share first-party data, according to The Rules of the Marketing Game, a 2023 report from Pantheon ...

April 08, 2024

Digital experience monitoring is the practice of monitoring and analyzing the complete digital user journey of your applications, websites, APIs, and other digital services. It involves tracking the performance of your web application from the perspective of the end user, providing detailed insights on user experience, app performance, and customer satisfaction ...

April 04, 2024
Modern organizations race to launch their high-quality cloud applications as soon as possible. On the other hand, time to market also plays an essential role in determining the application's success. However, without effective testing, it's hard to be confident in the final product ...