The Population Register Centre has held two Certificates since 2002
In 2002, the Population Register Centre became the first central government agency to be granted an Information Security Certificate. Our Information Security Certificate covers the activities and premises of the office in Helsinki as well as in Kokkola. A Quality Certificate has also been granted to the Quality System of our Certificate/EID Service. Both certificates have been granted by Inspecta Certification.
These certificates are not granted for an indefinite period: renewals require regular audits at least once a year. The organisation must maintain and develop its information security and quality systems and ensure that processes, work performances and services are carried out in accordance with the certified system.
Information Security Certificate
The Population Register Centre’s Information Security Certificate complies with the ISO/IEC 27001 standard. It covers issues such as information security policy, organisation of information security management, classification and control of assets protected, personnel security, physical information security, communications and operations management, access control, systems development and maintenance, business continuity management and compliance. The standard defines the high standard of information security that is implemented using the protection mechanisms chosen by the organisation.
Certificate for the Quality System of the Certificate/EID Service
The Certificate granted for the Quality System of the Certificate/EID Service of the Population Register Centre complies with standard SFS-EN ISO 9001:2008. The Quality System is an important tool for planning and developing the operations. Certification improves the public credibility of the operations and the system. The objective of having the Certificate, therefore, is to create an operational policy that involves continued development and to produce internationally valid evidence of the standards compliance of the Quality System.