Hikvision receives ISO/IEC 29147 and ISO/IEC 30111 certification for vulnerability management processes

manufacturing-news

Hikvision has been awarded ISO/IEC 29147:2018 and ISO/IEC 30111:2019 certifications by British Standards Institution(BSI), recognizing the company’s vulnerability management framework in line with internationally accepted standards. Developed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), the two standards define best practices for handling security vulnerabilities throughout the product lifecycle.

ISO/IEC 29147:2018 establishes guidelines for how organizations receive vulnerability reports from external parties and communicate relevant information publicly in a timely and structured manner.
ISO/IEC 30111:2019 outlines internal processes for analyzing, resolving, validating, and documenting reported vulnerabilities to ensure effective remediation.

During the certification audit, BSI evaluated Hikvision’s processes for identifying, assessing, and addressing security vulnerabilities. The assessment confirmed that Hikvision operates a documented and traceable mechanism for vulnerability handling, supported by automated tools to improve response speed and accuracy.

The certification also reflects Hikvision’s ability to reduce security risks for users and partners while maintaining consistency across its global supply chain. The achievement comes amid rising regulatory expectations worldwide. Hikvision’s certified processes align with evolving international requirements, including provisions under the European Union’s Cyber Resilience Act, which places strong emphasis on vulnerability disclosure and remediation across connected product lifecycles.

Security has been a long-standing focus within Hikvision’s product development and governance practices. In 2014, the company established the Hikvision Security Response Center (HSRC) to manage vulnerability reporting and disclosure at a global level. In 2018, Hikvision became a CVE CNA, working directly with the international security research community to identify and disclose vulnerabilities responsibly.

In 2023, Hikvision opened its CyberSafe Experience Center in Hoofddorp, the Netherlands, where it conducts routine vulnerability assessments and provides customers and partners with visibility into its security management practices. By implementing ISO/IEC 29147 and ISO/IEC 30111, Hikvision continues to refine its vulnerability handling framework, strengthen collaboration with external researchers, and support the delivery of secure and reliable intelligent products worldwide.

 Hikvision India is a leading provider of video security solutions, offering a comprehensive range of products and technologies that extend beyond security to include smart home solutions, industrial automation, and robotics. These innovations reflect the company’s vision for growth through technology and its commitment to enhancing safety, efficiency, and convenience across sectors.