FPT IS's Pentest service passed the rigorous evaluation round, helping the company qualify to become a member of the CREST organization from the end of February.
To be recognized as a member of CREST, enterprises need to achieve strict evaluation frameworks on the company, on professional capacity and on customer references. Regarding the company's capacity (25 criteria), FPT IS is assessed by CREST to meet international standards on expert capacity, professional experience, technological capabilities, policies, processes, procedures and professional ethics related to service provision. Most importantly, the unit is standardized according to international standard processes such as: ISO9001, ISO27001....
Regarding the capacity of Pentest services (more than 32 criteria), FPT IS achieved an almost perfect score thanks to the success of many large projects with a team of experienced technology experts. The company received many satisfactory reviews from domestic and international customers, helping to strengthen the position and capabilities of the business, making an impression on the evaluation council. According to the announcement from FPT IS, the unit is the only supplier in Vietnam to achieve the CREST certification for Pentest services and PCI.QSA for consulting, assessment, and certification services for PCI.DSS.
FPT IS representative said that becoming a member of CREST is an important step in the process of standardizing Pentest services according to international standards, meeting the needs and major problems of customers regarding security issues in Vietnam as well as globally.
"Being an official member of CREST helps FPT IS demonstrate its reputation and capacity in the field of information security testing; opening up many opportunities to connect with more than 300 partners and potential customers in the CREST community," said a company representative.
In 2023, the Ministry of Information and Communications warned and provided guidance on handling 12,846 cyber attacks, an increase of 5.3% compared to 2022. The targets that suffered the most attacks last year were government agencies, banking systems, financial institutions, industrial systems and other critical systems. In that context, Pentest services support organizations and businesses in testing, detecting security vulnerabilities and testing system penetration.
FPT IS's system administration and information security monitoring center. Photo: FPT IS
CREST (Council of Registered Ethical Security Testers) is a non-profit organization founded in 2006. It provides international certifications to organizations providing information security services. It also provides professional certifications to individuals in vulnerability assessment, penetration testing, network incident response, cyber threat intelligence, and security operations center (SOC). CREST will review annually and periodically re-evaluate the certified businesses every 3 years.
Mr. Rowland Johnson, Chairman of CREST, said he was delighted to welcome FPT IS as a member company of CREST in the Asia region. To be recognized, the unit underwent a rigorous assessment process to examine testing methods, legal and regulatory requirements, data protection standards, internal and stakeholder communications, etc.
"Becoming a member of CREST is a recognition of the quality of Pentest services, thereby providing customers with information security services with the highest trust," Mr. Rowland Johnson analyzed.
Mr. Nguyen Hoang Minh - General Director of FPT IS expressed his pride in becoming a technology partner of many leading organizations and enterprises in Vietnam and aiming globally. "We will continue to develop Made by FPT IS products and services that meet international standards, conquering the global market," Mr. Minh emphasized.
Before being confirmed as a member of CREST, FPT IS was a member of the Payment Card Industry Security Standard Council (PCI SSC) and was authorized to provide consulting, assessment, and certification services for PCI.DSS. Currently, the company accompanies many large customers in various fields: finance - banking, government, healthcare, logistics...
Minh Huy
source
Comment (0)