Sandvik Mining IT achieves ISO/IEC 27001 certification for global application delivery
Sandvik Mining has achieved ISO/IEC 27001 certification, underscoring its commitment to protecting information assets and ensuring the security, availability and integrity of mission critical digital business capabilities. The certification was awarded following an independent external audit of Sandvik Mining’s Information Security Management System (ISMS).
ISO/IEC 27001 is the leading international standard for information security management. It provides a structured framework to protect sensitive data, manage cyber risks and safeguard the confidentiality, integrity and availability of information throughout its lifecycle.
Sandvik’s Mining ISMS focuses on establishing, implementing and continually improving controls that address modern cybersecurity threats, data privacy requirements and regulatory expectations. For mining, this includes security governance, risk assessment, secure development practices, access management, incident response and supplier controls that are systematically integrated into day-to-day operations.
“Achieving ISO/IEC 27001 certification is an important milestone for Sandvik Mining and a clear demonstration of our commitment to information security, customer trust and operational resilience,” said Sofia Sirvell, Executive Vice President and CDO of Sandvik Mining. “As digital technologies continue to play an increasingly important role in the mining industry, our customers and partners must be able to rely on secure and well-governed services. This certification reinforces our dedication to protecting information assets and continuously improving the way we manage security risks.”
By aligning its global application delivery processes with ISO/IEC 27001, Sandvik Mining ensures that cybersecurity considerations are built into solution design, deployment and ongoing support. This security by design approach helps protect customer data, intellectual property and operational environments, while enabling reliable and scalable digital transformation for mining operations.
Janne Kivinen, Director of Enterprise Technology of Sandvik Mining added: “ISO/IEC 27001 provides a common framework and clear accountability, helping us manage risk consistently, strengthen collaboration with our suppliers and build confidence for both Sandvik and our customers as we continue to modernize our application landscape.”
The certification also strengthens Sandvik Mining readiness for evolving regulatory and contractual requirements related to cybersecurity, data protection and third-party risk management. Customers can expect consistent security controls, clearly defined responsibilities and a continuous improvement approach aligned with international best practice.
With ISO/IEC 27001 certification, Sandvik Mining has taken a significant step in strengthening its information security governance and demonstrating its commitment to secure, reliable and trusted digital services.
For further information, please contact:
Eric Gourley
External Communications Manager
Sandvik Mining
Email: eric.gourley@sandvik.com