OpenPeppol has taken an important further step to strengthen the security and resilience of the Peppol Network.
The OpenPeppol Managing Committee has approved the OpenPeppol Security Policy, establishing an updated framework for addressing security across the network.
As the security landscape continues to evolve, maintaining a strong security posture is an ongoing priority. OpenPeppol continues to strengthen its security framework and resilience in response to the security threats and challenges facing critical digital infrastructure.
The approved Security Policy will be integrated into the Internal Regulations Part II, where it will replace the current content of Section 6.
Approved Security Policy
To inform members of the approved content ahead of its formal integration into the Internal Regulations Part II, the Security Polica is currently available on a temporary page:
View the Security policy
All comments received during the member review have been addressed. The comments submitted and the corresponding responses are available on the member review page:
View the Member review – comments and responses.
Approved equivalent certifications
As part of the Security Framework, the Managing Committee has also approved a list of certifications that are accepted as equivalent to ISO/IEC 27001.
The following certifications are currently accepted as equivalent:
- BSI IT Grundschutz
- CyFun Essential
- eIDAS QTSP
The approved list is available together with the Security Policy on the temporary page.
The approval of the Security Policy marks a further step in OpenPeppol’s ongoing work to uplift its security posture and support the continued resilience of the Peppol Network as the threat landscape evolves.