Date: 6 October 2026
Author: Vanshika Tyagi
VIBA INSURANCE BROKERS, based in Ghana, has received ISO/IEC 27001:2022 certification for its information security management system (ISMS) from Pacific Certifications.
The certified scope covers the provision of insurance brokerage services, including digital and e-insurance purchase platforms, insurance management systems, policy administration, and client data management.
ISO/IEC 27001:2022 sets requirements for establishing, implementing, maintaining and continually improving an ISMS. Organizations use this system to assess information security risks, determine appropriate controls and evaluate their effectiveness. The aim is to protect the confidentiality, integrity and availability of information handled within the management system’s scope.
For VIBA INSURANCE BROKERS, the stated scope connects the ISMS to both digital insurance purchases and the administrative handling of policies and client records. Security risk reviews need to consider how information is stored, accessed, processed and shared across these activities. This supports a consistent approach to managing information across the covered services.
Pacific Certifications issued the certification following independent audit assessment, review of audit evidence and a certification decision. The assessment process addresses both the documented management system and its implementation. For VIBA INSURANCE BROKERS, the certification relates to conformity with ISO/IEC 27001:2022 requirements within its certified scope.
VIBA INSURANCE BROKERS is responsible for keeping its ISMS effective in daily operations. Risk reviews, internal audits and management reviews help the company identify weaknesses and follow up on agreed improvements. Surveillance and recertification audits independently assess whether the system continues to meet certification requirements, while corrective actions address the underlying causes of identified nonconformities.
VIBA INSURANCE BROKERS find problems in its information security system. Management reviews check progress on improvements, while corrective actions deal with the causes of problems. Independent surveillance and recertification audits check whether the system still meets certification requirements for the services covered.
