ArrowSphere meets the highest standards for security and reliability

Arrow Electronics is pleased to announce that our award-winning marketplace and management platform, ArrowSphere, has obtained the International Organization for Standardization (ISO) 27001 certification. This achievement is based on the results of an assessment of our information security management system (ISMS) that is used to develop, operate and protect the ArrowSphere platform. 

What is ISO and 27001 certification?

ISO is an independent, non-governmental organization and the world's largest developer and publisher of international standards that support innovation and provide solutions to global challenges. The ISO 27001 certification is a globally recognized standard created to set requirements for establishing, building, maintaining and continually enhancing an ISMS.

Why does ISO certification matter? Rest assured with Arrow

Earning ISO 27001 certification validates that the supporting infrastructure — the people, processes and technology that could impact the security of the ArrowSphere platform and/or its services — meets the requirements of the ISO standard.

Arrow earned the certification as a result of a thorough and rigorous audit of the ArrowSphere platform; the certification was completed by BSI Group. With this industry marker, organizations across the IT channel can have confidence in doing business with Arrow, as it demonstrates the high value we place in security and our deep commitment to adhering to stringent compliance and security practices.

ISO certification brings peace of mind that ArrowSphere operates with integrity and meets ISO standards. It provides customers from around the globe confidence that ArrowSphere is a secure platform — as demonstrated by an in-depth evaluation of 114 different controls. ArrowSphere proved to be a secure platform that organizations can trust based on critical controls, such as:

• Secure software development of ArrowSphere platform
• Confidentiality, integrity and availability of the data
• Infrastructure resilience with implemented incident management plans, business continuity, and disaster recovery plans
• Physical security controls to protect the facilities where these services are provided
• Vendor and supplier management
• Continuous employee information security training, including risk mitigation and vulnerability management controls

Read more about Arrow cloud and security services by visiting our blog, Arrow Channel Advisor. And be sure to check out our ArrowSphere page to learn more about our award-winning, secure marketplace development platform.