What are ISO certifications and why are they so important for a data center?

When we say that quality and security are part of Adam’s DNA, it’s because we work with these principles in mind. The certifications granted to us by independent and impartial entities like Applus+, following rigorous audits, guarantee that we meet international standards. These are not just words—they are tangible actions.

Currently, we hold the ISO 9001 certification, a guarantee of quality and efficiency, and the ISO 27001 certification, a guarantee of security. But before diving into the details, let’s clarify what we’re talking about.

What is an ISO certificate?

An ISO certificate is a set of standards developed by the International Organization for Standardization (ISO) to organize management within companies across various fields and departments. This organization creates manufacturing, trade, and communication standards that have global reach.

The ISO 9001 and ISO 27001 certifications

  • ISO 9001: This standard establishes the requirements for a Quality Management System (QMS), enabling companies to demonstrate their ability to meet customer requirements and validate this capability to stakeholders. It is the most commonly recognized ISO certificate worldwide, with over a million certified companies since its inception in 2002.

At Adam, ISO certifications have evolved alongside our company. The first ISO 9001 certification we achieved was in 1998, and later, data center services were incorporated into its scope. Over time, we adapted to new specifications of the standard, which initially focused only on management models but later evolved to include process review methods for continuous improvement.

  • ISO 27001: Designing and implementing an Information Security Management System (ISMS) according to this standard instills confidence in clients and suppliers, preserving the confidentiality, integrity, and availability of information. It is the most effective way to minimize information security risks.

In 2014, we at Adam committed to ISO 27001 certification, and by 2015, we had obtained our first certification thanks to the dedication of our team. While it shares many elements with ISO 9001, ISO 27001 applies these principles to data security, with stricter controls such as risk assessments and continuity planning.

    What does it mean for Adam to hold ISO certifications?

    These certifications go beyond simply having documented protocols and following them—which is already significant. They require leadership that prioritizes ISO standards and successfully involves all departments, making it an integrated and complex effort.

    To achieve this, significant internal and external training is essential, ensuring that all team members understand and integrate the system into their processes. This approach empowers department leaders to maintain the system themselves, reducing the need for constant oversight from quality managers.

    Each year, we take necessary actions to analyze our context and stakeholders at every organizational level. This process goes beyond financial data, which often provides a partial snapshot of past events.

    Instead, we go further through periodic focus groups, where each department:

    • Shares ideas to help revise company planning.
    • Provides insights on related stakeholders, including customers, suppliers, employees, shareholders, public administrations, competitors, etc.
    • Reviews the company’s overall context, identifying strengths to enhance, weaknesses to address, threats to anticipate, and opportunities to seize.

    I still recall the smiles on our team’s faces when we reviewed continuity plans, and someone added the possibility of a pandemic to the list. Little did we know that not long after, we would activate that protocol and maintain it for over two years. Thanks to this foresight, the company continued its activities 365 days a year without interruption.

    The National Security Scheme (ENS): Our most recent certification

    As part of our commitment to improving standards and guarantees, we set ambitious goals, including achieving ENS (National Security Scheme) certification in 2021.

    With the rise in cyberattacks worldwide, especially during the pandemic, we believed it was critical to strengthen our security efforts. In 2020, we began studying the ENS framework, which required additional measures within our ISO 27001 system while also serving as a valuable guide for enhancing security.

    We incorporated new measures, such as dual authentication, encryption, and the preparation of a BIAS document, among others. After an audit, we successfully obtained ENS certification.

    Certifications: A continuous effort at Adam

    Every year, we establish KPIs to monitor organizational performance, such as staff turnover rates, budget compliance, customer and supplier evaluations, SLA adherence, and incident management ratios, among others.

    We remain committed to maintaining these high standards and aim to incorporate additional certifications that enhance the value of our services and benefit our clients.

    Need more information about our data center services?

    Download our technical sheet on colocation services for more details.

    This article has been written by

    Nuria Vallmitjana
    Directora Financiera y Responsable de Recursos Humanos