Nemetschek Trust Center

 
image

Information security is of fundamental importance to us. It plays a crucial role in fostering trust -based collaboration with our business partners and all relevant stakeholders, while also supporting the long-term success of our company. All employees are fully aware of the necessity to perform their daily tasks in alignment with information security principles. To support these efforts, the Nemetschek Group has established an Information Security Management System (ISMS) certified according to ISO/IEC 27001:2022 which includes the following security principles:

Management Responsibility:
At Nemetschek, our Executive Board holds ultimate responsibility for information security across all our companies and demonstrates strong commitment to it. The Board fully empowers and supports our Corporate Information Security Officer in implementing and maintaining robust information security measures. We actively encourage all employees to contribute to safeguarding our data and upholding the highest standards of information security.

Confidentiality:
We protect sensitive information from unauthorized access or disclosure.  

Integrity:
We ensure data remains accurate, complete, and unaltered throughout its lifecycle.   

Availability:
We make sure that systems and information are accessible when needed.   

Continuous Improvement:
We constantly refine our processes and systems to enhance security and efficiency. 

Dealing with Deviations:
We continuously identify, address, and learn from any deviations. We analyze deviations to improve the ISMS and ensure it stays up to date with the latest IT security trends and technologies. 

Business Continuity Management (BCM):
Our Business Continuity Management ensures that critical operations remain resilient and recoverable in the face of disruptions.

These essential principles form the basis of our approach to information security.
Building upon this foundation, our strategy focuses on the following security objectives that guide our efforts and investments: 

These essential principles form the basis of our approach to information security. Building upon this foundation, our strategy focuses on the following security objectives that guide our efforts and investments: 

Information Security Management

As part of the ISO/IEC 27001:2022 certified ISMS, Nemetschek has established a comprehensive Information Security Control System (ISCS). This system integrates customer requirements, regulatory standards, and industry frameworks, ensuring the implementation of robust processes to safeguard company assets and continuously enhance our security posture.

These essential principles form the basis of our approach to information security. Building upon this foundation, our strategy focuses on the following security objectives that guide our efforts and investments: 

Cyber Defense

We proactively defend against evolving threats with advanced monitoring, threat intelligence, and incident response capabilities with state-of-the-art technology and our dedicated Security Operations Center (SOC).

These essential principles form the basis of our approach to information security. Building upon this foundation, our strategy focuses on the following security objectives that guide our efforts and investments: 

Secure Software Developement

Security is embedded in every step of our software development lifecycle, ensuring resilient and trustworthy solutions for the AEC/O industry.

Overview of Certifications

Related Topics