Relevant Standards And Assurance

• ISO/IEC 27001 is relevant for information security management. The current documented certification applies to Curanet/team.blue Denmark provider scope for relevant IaaS and infrastructure services.
• ISAE 3000 and ISAE 3402 Type 2 are relevant provider assurance reports for selected hosting, data processing and IT general control areas.
• GDPR is relevant when Emiko processes personal data.
• NIS 2 is relevant for cybersecurity governance and supplier assessment where a customer or entity is in scope.
• IEC 62443 is relevant for operational technology, industrial automation and secure development or gap-assessment discussions where Emiko is used in or connected to operational environments.

Assurance Scope

Curanet/team.blue Denmark assurance supports the hosting and infrastructure provider scope. Emiko-specific standards discussions are handled through supplier assessment, customer security review or a documented gap assessment when relevant.

Provider certificates, supplier assurance reports, platform documentation and customer review material each support the scope they cover.

Review Areas

Where IEC 62443, OT security or broader supplier-security requirements are relevant, Vikingegaarden can support a review covering areas such as:

• secure architecture, communication flows and operating responsibilities
• access control, identity and administrative access
• vulnerability handling, patching and maintenance
• logging, monitoring, backup and restore
• secure development and continuous improvement practices

Continuous Improvement

Vikingegaarden continues to improve Emiko security documentation and operating controls as the platform evolves, supplier documentation changes, customer reviews expose new documentation needs and relevant regulation or standards expectations change.

Next Step