07/09/2026
ISO 27001 isn’t something you achieve once and put on the wall.
We’re pleased to have successfully completed Layer3’s first annual ISO/IEC 27001:2022 surveillance audit, with no major or minor nonconformances identified and a recommendation from the auditor that our certification be maintained.
The audit looked beyond policies and documentation and into how our Information Security Management System works in practice, including risk management, staff awareness, technical security monitoring, incident response, business continuity and physical security. The auditor specifically noted the effective use of our risk and treatment processes, staff awareness activities, technical monitoring and traceable response to security events.
For an MSP, we think that distinction matters.
Our customers trust us with access to some of their most important systems and information. ISO 27001 gives them independent assurance that the security controls, processes and governance behind Layer3 are being actively operated, reviewed and improved, not simply documented.
A great result, and a credit to the work the team puts into security every day.
