Information security
Tehnoline Telekom is certified to the international standard ISO/IEC 27001:2022 for information security management. The certificate was issued by DNV under accreditation of the Dutch accreditation body RvA.
As an electronic communications operator and ICT service provider, we manage network infrastructure, customer data and systems our clients depend on every day. We therefore treat information security as an ongoing management process with defined ownership, measurable objectives and regular independent audits - not as a one-off project.
Certificate details
- Certificate holder
- TEHNOLINE TELEKOM d.o.o.
- Certificate number
- C806570
- Standard
- ISO/IEC 27001:2022
- Certification body
- DNV Business Assurance B.V.
- Accreditation body
- RvA
- Initial certification date
- 9 September 2026
- Valid
- 9 September 2026 – 8 September 2029
- Scope of certification
- Delivery of telecommunication services. ICT systems implementation and support. In accordance with the Statement of Applicability (SoA) version 1.0.
Sites covered by the certificate
The appendix to the certificate lists the following sites and their scope:
| Site address | Site scope |
|---|---|
| Draguzeti 15A, 52207 Barban | Administrative head office with no business activities. |
| Bože Gumpca 49, 52100 Pula | Delivery of telecommunication services. ICT systems implementation and support. |
What our management system covers
Risk management
Regular identification, assessment and treatment of information security risks following a defined methodology, with clearly assigned risk owners.
Access control
Least-privilege principle, multi-factor authentication for administrative access and periodic reviews of user rights.
Network and systems security
Segmentation, monitoring and logging of network and server infrastructure, vulnerability management and controlled change management.
Incident management
Defined procedures for reporting, classifying, handling and escalating security incidents, including reporting obligations towards the competent authorities.
Business continuity
Backups, recovery plans and regular testing so that services stay available even in exceptional circumstances.
People and suppliers
Pre-employment screening, confidentiality obligations, regular staff training, and security assessment and contractual obligations for suppliers.
Regulatory compliance
ISO/IEC 27001 complements the obligations we already carry as an electronic communications operator and a personal data controller:
- GDPR - technical and organisational measures for the protection of personal data.
- Cybersecurity Act (NIS2) - cyber risk management measures and incident reporting obligations for entities in the digital infrastructure sector.
- Electronic Communications Act - security and integrity of networks and services, and confidentiality of communications.
For business customers this simplifies supplier due diligence: instead of lengthy security questionnaires, there is a certificate from an independent accredited body for a clearly defined scope of services.
Maintaining the certificate
The certificate is not a one-off confirmation. The system is subject to regular internal audits, management review and annual DNV surveillance audits throughout the three-year cycle, followed by recertification.
Reporting a security issue
If you have discovered a security vulnerability or suspect a security incident related to our services, please contact us at help@tehnoline.hr.
The certification was carried out as part of a project co-financed by the European Union. More about the project.
Get in touch →