BM Certification has issued the ISO 27001 certificate to the University of Tartu
The University of Tartu is the first Estonian university to receive a certificate confirming compliance with the requirements of the international information security standard ISO/IEC 27001:2022. This proves that the university manages the information at its disposal systematically, transparently and in a risk-aware manner.
According to Elin Nurges, Head of Information Security at the University of Tartu, obtaining the certificate is an important step both in terms of the university’s internal work organization and partnership relations.
Obtaining the certificate supports the university’s long-term goals of ensuring the security of research and educational data, meeting increasingly stringent requirements arising from the law and partnership relations, and strengthening the university’s position as a reliable research and development partner. The introduction of a standard information security framework allows the university to better manage risks, increase the level of cybersecurity and ensure that the processes and technical solutions in use meet modern requirements. The certificate supports the university’s international cooperation, especially in projects where one of the prerequisites for participation is compliance with the information security standard.
BM Certification Estonia OÜ auditors conducted certification audits in the spring of 2025 at the University of Tartu Research Computing Center and in the autumn and winter of 2025 at the remaining structural units of the university. The audit and certification process at the University of Tartu was a very valuable experience for our auditors. The university’s cooperation with the auditors will also continue during surveillance audits.
Congratulations to the entire university family on this significant achievement!
BM Certification Estonia team
Photo autor: Andrea Rotenberg