Co-operative Bank Attains ISO/IEC 27001:2022 Certification

Co-operative Bank Attains ISO/IEC 27001:2022 Certification, Boosting Customer Data Protection

Co-operative Bank https://www.co-opbank.co.ke/  of Kenya has successfully transitioned to the updated ISO/IEC 27001:2022 standard. The achievement marks a new global benchmark for the bank’s information security management systems.

BSI, the business improvement and standards company, awarded the certification during a handover ceremony at Co-operative Bank House on Friday, 5th September 2025.

Strengthening Security Through Global Standards

The certification followed an extensive external audit that reviewed several critical areas. These included physical security, access controls, risk management, change management, business continuity, and secure software development practices.

Charles Washika, Director ICT & Innovations at Co-operative Bank, explained the importance of this milestone.

“Achieving this certification demonstrates our commitment to protecting customer information through world-class information security standards. It has enhanced our risk management, standardized security policies across the bank, and strengthened our incident response capabilities. These measures ensure compliance while reinforcing the trust customers, partners, and regulators place in Co-operative Bank.”

Ilias Karampoikis, IMETA Sales and Commercial Director at BSI, added:

“Certification to ISO/IEC 27001 shows that Co-op Bank has taken the necessary steps to guard against cyber threats and align with global best practice. This focus on digital trust is crucial in a rapidly changing world.”

Co-operative Bank Attains ISO/IEC 27001:2022 Certification, Boosting Customer Data Protection

Commitment to Customers and the Digital Economy

Co-operative Bank became the first bank in East Africa to earn ISO/IEC 27001:2013 certification back in 2014. The updated 2022 standard now addresses modern cyber threats and ensures the confidentiality, integrity, and availability of sensitive data.

For customers, the benefits are clear. Their personal and financial information is now processed and stored under internationally recognised security protocols. The bank’s advanced Information Security Management System minimizes risks of data breaches while enabling safer digital banking.

Mr. Washika emphasized the bank’s long-term dedication.

“Since our initial ISO certification, we have consistently strengthened our security capabilities. We have invested in cutting-edge tools, recruited skilled cybersecurity experts, and implemented new systems covering all 93 ISO/IEC 27001 controls.”

Regional Leadership in Information Security

As a pioneer in information security certification, Co-operative Bank continues to set the pace in the region. The recognition strengthens its ability to serve international clients and supports its expansion across East Africa.

This achievement also aligns with Kenya’s financial sector digitisation agenda and complements compliance with Central Bank of Kenya regulations. By continuously upgrading its systems, Co-operative Bank reaffirms its long-term commitment to customer data protection and to advancing Kenya’s digital economy.