Short answer
Yes. FirstNet's information security management system (ISMS) is certified to ISO 27001, and its quality management system (QMS) to ISO 9001. Its own Durban data centre is also certified to ISO/IEC 27001 and ISO 9001.
In detail
What this means, along with FirstNet's other credentials:
- ISO 27001: formal security governance, risk management, change control, monitoring and incident response, all under audit.
- ISO 9001: written processes for service delivery and continual improvement.
- ICASA licences for electronic communications services and networks (ECS and ECNS).
- BBBEE Level 1 contributor status.
The scope of each certificate matters. If you need a named certificate for a certain site or service, FirstNet confirms the scope for that site first. It does this before it commits anything in writing. At Teraco colocation sites, each campus has its own scope. So FirstNet confirms the evidence for the site you choose.
A certificate alone also does not make your workloads compliant. Compliance with POPIA and sector rules is shared. FirstNet's certified systems cover the platform. Your own settings, data classification and governance shape the final result.
Source: FirstNet Cloud service page →
Didn’t answer your question?