ISO/IEC 27001 — Information security management
ISO/IEC 27001 is the international standard for an information security management system (ISMS): a structured way to identify information risks and treat them with controls. Its Annex A lists controls across organizational, people, physical and technological themes. Certification is granted by accredited certification bodies after an audit.
- Published by:
- ISO / IEC
- Official source
- Official source
Why it matters to your dealership
It’s the most widely recognized security standard in the world. A platform built around it treats your dealership’s information as something to be managed deliberately — not protected by accident.
Our status
Dealer Suite 360 applies ISO/IEC 27001 principles and controls. We are not ISO/IEC 27001 certified.
How Dealer Suite 360 applies it
- Least-privilege access by role; any account can be disabled and all of its sessions revoked instantly.
- Sessions expire automatically, team sessions last at most 12 hours, and a password change signs out every other device.
- Sign-in codes are single-use, expire in 5 minutes and stop working after 5 wrong attempts.
- Passwords must be 12+ characters and are checked against known data breaches; they are stored only as salted hashes.
- Reputable infrastructure providers with their own security programs host the platform (see our privacy policy).
- Backups and version-controlled deployments make recovery from mistakes or incidents possible.
Dealer Suite 360 is designed and operated in alignment with these frameworks. Alignment does not imply formal certification.
