6 November 2026

 

Slimstock has successfully passed its latest external audit against the ISO 27001:2022 standard, conducted by DNV, and achieved NIS2 supply-chain certification at SC30 level, providing independent assurance of our continued commitment to information security and cybersecurity risk management.

We’re proud to announce that Slimstock has once again successfully passed its external audit against the ISO 27001:2022 standard, carried out by DNV, reinforcing our ongoing commitment to maintaining high standards of information security.

Following the successful completion of the audit process, Slimstock’s new ISO 27001:2022 certificate has been issued by DNV and will be valid for another three years.

 

NIS2 supply-chain certification achieved

This year’s audit also included an assessment against NIS2 supply-chain requirements, which Slimstock successfully passed.

Although Slimstock is not classified as an essential or important entity under the legislation, we chose to make our compliance independently demonstrable. As a result, Slimstock has now achieved the NIS2 supply-chain certificate at SC30 level.

NIS2 is European cybersecurity legislation designed to strengthen the digital resilience of essential and important organisations. It sets requirements covering risk management, governance, incident reporting and supply-chain security.

For Slimstock, the framework provides an additional way to demonstrate that cybersecurity risks are managed responsibly, even though we are not directly classified as an essential or important entity under the legislation.

 

Strengthening our supplier security processes

One of the findings identified during the audit concerned the way potential information security risks associated with new suppliers are assessed before a supplier relationship begins.

The audit highlighted the importance of carrying out this assessment at an early stage, particularly where a new supplier may have access to Slimstock locations, networks or data.

In response, Slimstock is strengthening its processes to ensure that potential information security risks are considered before new supplier relationships commence.

 

What this means

Successfully completing both assessments provides further independent assurance of Slimstock’s approach to information security:

  • Independent assurance: Our information security management has been independently audited against the ISO 27001:2022 standard by DNV.
  • Continued certification: Our DNV-issued ISO 27001:2022 certificate is valid for another three years.
  • Supply-chain confidence: Our NIS2 SC30 certification provides additional, demonstrable assurance around supply-chain cybersecurity.

Achieving both ISO 27001:2022 and NIS2 SC30 certification reflects Slimstock’s continued focus on managing information security and cybersecurity risks responsibly, while strengthening our processes as security requirements continue to evolve.