I am pleased to announce that Mechanical Orchard has achieved ISO/IEC 27001:2022 certification, following an audit of our Information Security Management System (ISMS) by Schellman, an independent, ANAB-accredited certification body.

ISO/IEC 27001 is the leading international standard for information security management, published jointly by the International Organization for Standardization and the International Electrotechnical Commission. Certification confirms that an organization has implemented a risk-based system of security controls and, just as importantly, that those controls are operating as described.

The certification covers the people, processes, and technology we use to perform mainframe modernization, including the Imogen platform, our development and operational environments, and the systems that govern how customer data is handled throughout an engagement.

Imogen reduces modernization risk by running legacy and modernized systems in parallel and establishing behavioral equivalence — or, as I prefer to call it, bug-for-bug compatibility. ISO/IEC 27001 applies that same standard of independent evidence to how we operate as a company: how we control access, protect customer source code and data, respond to incidents, and manage our own suppliers.

ISO/IEC 27001:2022 joins our SOC 2 Type II attestation and our GDPR compliance program, giving clients further independent assurance that their systems and data are protected throughout the modernization process.

Our certificate, Statement of Applicability, and other security documentation are available through our trust portal.

‍