CrownCity Technologies receives two international certifications
CrownCity Technologies (CCT), a fast rising Fintech company has received two International certifications after successfully going through the accreditation process.
The company is now ISO/IEC 27001:2013 and Payment Card Industry Standard (PCI DSS) certified.
In a release issued by the company, it said the certifications further consolidate its position as a market leader in providing platforms for licensed financial Institutions to lend.
The ISO 27001 and PCI DSS certifications were issued by the MSECB and Digital Jewel Africa respectively.
MSECB is an accredited management system certification Body by the International Accreditation Service (IAS), and a leading provider of audit and certification services in the field of information security and privacy in the world.
Digital Jewel Africa on the other hand is a qualified security assessor by the PCI DSS Security Standard Council.
Commenting on the certifications, the Risk and Compliance Manager at CrownCity Technologies, Emmanuel Anku said “as the risk associated with Cyber-attacks and data breaches continue to increase, Information security has become a critical issue for every business to help defend itself against external and internal attacks.”
He added that, the certifications would go a long way to provide confidence in the company’s current and potential business partners.
He said the certifications further shows the company’s commitment to harness technology to build financial service platforms to ensure that everyone, regardless
of background or economic standing, had access to affordable, seamless convenient and secured products and services.
Mr Anku also pointed out that the company was already certified with the Ghana Data Protection Commission, and the two international certifications recently acquired would enhance the company’s compliance to a host of laws.
The lead Software Engineer, Mohammed Bashiru listed some of the security systems
implemented in order to be ISO/IEC 27001:2013 and PCI DSS complaint.
They include but not limited to; firewalls installations, dedicated antivirus, fire integrity
management systems, intrusion detection and prevention systems; and access control measures.