Kumari Bank secures ISO/IEC 27001:2022 certification
The ISO/IEC 27001:2022 standard comprises 93 controls divided into four key categories: Organizational (37), People (8), Physical (14), and Technological (34).
KATHMANDU: Kumari Bank Limited has been awarded the internationally recognized ISO/IEC 27001:2022 Information Security Management System (ISMS) certification, underscoring its commitment to safeguarding customer data and ensuring robust cyber security.
The ISO/IEC 27001:2022 standard comprises 93 controls divided into four key categories: Organizational (37), People (8), Physical (14), and Technological (34).
These controls are independently audited to verify compliance before certification is granted.
With this certification, Kumari Bank demonstrates its strong capability in identifying, assessing, and managing information security risks in line with global standards.
The bank ensures that customer data is protected, confidential, and accessible only when required, while implementing a fortified security framework against unauthorized access.
In an era of rapid digital banking growth, cyber security and data privacy remain top priorities for customers and stakeholders.
Kumari Bank has applied high-level security standards across its mobile banking, internet banking, card services, and internal systems, reinforcing trust and reliability.
On the occasion, CEO Ramchandra Khanal stated: “Customer trust is the foundation of banking services. Receiving the ISO/IEC 27001:2022 certification reflects our unwavering commitment to protecting our clients’ financial information. We will continue to invest in technology, human resources, and processes to provide a safe and reliable banking environment.”
The bank continues to implement a comprehensive structure to prevent, detect, and manage potential cyber threats through regular risk assessments, employee awareness programs, security testing, and continuous monitoring.
Kumari Bank emphasized that information security is an ongoing process, not a one-time achievement, and reaffirmed its commitment to enhancing security mechanisms in line with regulatory standards and international best practices in the years ahead.
