Tongwei Won Another International Certification—ISO 27001, the International Standard for Information Security Management Systems
2025-03-03

Recently, Tongwei Co., Ltd. was awarded the ISO/IEC 27001:2022 Information Security Management System Certification by Det Norske Veritas (DNV). The certification is also accredited by the International Accreditation Forum (IAF) and the United Kingdom Accreditation Service (UKAS), underscoring its authority and credibility.


As a prominent player in the PV sector, Tongwei has consistently prioritized the safeguarding of information security for both the company and its customers as a critical operational responsibility. This certification not only serves as international validation of the company's information security management capabilities but also marks a significant milestone in the company's commitment to sustainable development (ESG) strategies. It further enhances Tongwei's credibility among investors and consumers, injecting robust momentum into the company's sustainable growth and expansion in global markets.

15edfb62feb75a03688c04f0412c7cc5.jpg

The ISO/IEC 27001:2022 standard encompasses four information security control domains and 93 control requirements. Led by its Information Department, Tongwei Co., Ltd. has thoroughly explored and mapped out 15 operational capabilities, establishing a comprehensive framework for its information security management system. During the project implementation, the company began with a current state analysis, conducted extensive interviews to gain insights into the information security landscape, performed gap analysis based on such information, and designed and promptly implemented procedural workflows. During a three-month trial period, the Information Department of Tongwei Co., Ltd. closely monitored operational effectiveness, gathered feedback for timely revisions, and supplemented six information security policies covering various aspects such as training, outsourcing management, and development security. Additionally, four categories of information security products were introduced, and 62 information security metrics were quantified and implemented. By integrating policies, processes, and technologies, Tongwei has laid a solid foundation for continuous improvement.

338e190b47a85ebf00cdf7938d90b145.jpg

This certification marks a new beginning for Tongwei in information security governance. In the future, Tongwei Co., Ltd. will uphold its mission in information security, integrate advanced concepts and technologies, leverage emerging technologies, enhance protection and emergency response capabilities, and drive innovation in information security management standards to promote the healthy and sustainable development of the PV sector, thereby contributing to the establishment of a secure and efficient information governance ecosystem.


DNV is a globally recognized risk management and international certification authority, established in Oslo, Norway, in 1864. With a brand history exceeding 160 years, DNV has garnered widespread recognition from global customers for its extensive technical expertise in the fields of shipping, oil and gas, renewable energy, and industrial products. DNV's certification services are not only renowned worldwide, but also ensure the authority and credibility of certifications through rigorous service processes and its professional technical team.