Trust Centre

Security

VCDM: An Information Security Management System for the cloud

The Visma Cloud Delivery Model (VCDM)  describes our approach to developing, delivering and operating cloud services. It describes aspects of how we should be organized, how we should work (processes) as well as technical requirements and best practices necessary for successful cloud service delivery.

The model is based on a set of core principles and focuses on SecDevOps and Continuous Delivery. VCDM has the following audit assurance report and certifications:

  • ISAE 3402 Type II
  • ISO 27001

The Visma Security Program and the Visma Architecture and Technology Program are integrated in the Visma Cloud Delivery Model. Our Information Security Management System (ISMS) is certified according to ISO 27001 and it’s audited annually by an independent IT auditor.

‍

In addition, Visma's ability to comply with the ISMS and the Quality Management system  in VCDM is audited by an independent audit company in accordance with ISAE 3402. This comprehensive check is also carried out annually and is summarised in an ISAE 3402 Type II report.

‍

Here you can read more about the security benefits of VCDM and about how VCDM benefits you as a customer.

ISAE 3402 Type II

The scope of an ISAE 3402 report is the organisation's controls over services and functions performed, to evaluate the internal control over financial reporting.

VCDM offers its (potential) customers and their auditors an ISAE 3402 Type II assurance report, prepared by an external audit firm and documented in accordance with the International Standard on Assurance Engagement 3402.

To request a copy of the ISAE report, contact your local Sales Contact in Visma, who will verify that your product is covered in the report.

Read more
ISO 27001

ISO 27001 contains requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS).

VCDM ISO27001 Certificate
Services covered by the certificate