ISO/IEC 27001:2022 — our information security management system

Question we hear most often: "Our supplier risk-assessment questionnaire asks for ISO/IEC 27001 certification. We need a current certificate, certification body, scope statement, and validity dates. What can MAXHUB provide?"

Short answer: a current ISO/IEC 27001:2022 certificate from CEPREI Certification Body, registration number 01225IS0152R2M-1, valid through March 2028, covering the design, development, sales, and service of the relevant MAXHUB product lines.

Why ISO 27001 matters in supplier risk assessment

ISO/IEC 27001 is the dominant international standard for Information Security Management Systems. It is recognised across virtually all procurement frameworks, by every major enterprise security review process, and by public-sector tender criteria. A current certificate from an accredited certification body is widely accepted as primary evidence that a supplier operates a systematic, audited approach to information security. Covering people, processes, and technology.

Our certificate details

• Standard — ISO/IEC 27001:2022 (current version of the standard).
• Certificate holder — Guangzhou Shirui Electronics Co., Ltd. (the MAXHUB manufacturer entity).
• Certificate registration number — 01225IS0152R2M-1.
• Certification body — CEPREI Certification Body.
• Validity — valid through March 2028, subject to annual surveillance audits.
• Scope — design, development, sales, and service of interactive intelligent tablets, smart blackboards, LED display equipment and components, audio and video collection and processing equipment (including recording and broadcasting), student terminals, computer all-in-one machines, and integrated solutions for intelligent teaching.

Related certifications under the same governance framework

• ISO/IEC 27701:2019 — Privacy Information Management System, BSI certificate PM 779336. Extends our ISO 27001 ISMS to cover personal data processing as both controller and processor.
• ISO 22301 — Business Continuity Management.
• ISO/IEC 20000-1:2018 — IT Service Management.

On vulnerability findings and remediation

Penetration tests find issues. That is what they are designed to do. Our IOActive engagement was no exception. The full assessment letter is available under NDA. MAXHUB has worked through the recommendations from this engagement and has a follow-up validation engagement planned.

How to obtain the certificate

The ISO/IEC 27001:2022 certificate is available on request via the document library, alongside the ISO/IEC 27701:2019 privacy management certificate.