Softlogic Life has become the first insurance company in Sri Lanka to achieve ISO/IEC 27001:2022 certification, strengthening its commitment to information security, cybersecurity resilience and digital trust as the company expands its regional presence. The certification was achieved through the implementation and management of an Information Security Management System (ISMS) on its IO digital platform.
As insurers increasingly rely on digital platforms to deliver products and services, protecting sensitive information has become a critical component of customer trust. For Softlogic Life, this milestone represents a significant advancement in strengthening information security governance and embedding robust cybersecurity practices across the technology infrastructure supporting its insurance operations and digital services.
ISO/IEC 27001:2022 is an internationally recognised standard that provides a structured framework for establishing, implementing, maintaining and continually improving an Information Security Management System. It helps organisations identify, assess and manage risks associated with the confidentiality, integrity and availability of information.
A key area of focus in Softlogic Life’s implementation has been the enhancement of application security, with information security principles integrated throughout the application development and management lifecycle. These practices are increasingly important as digital platforms support a growing range of customer interactions, including onboarding, claims processing and policy servicing.
The certification also reflects the adoption of structured controls covering risk management, access management, vulnerability management, incident response, business continuity, supplier security and continuous security monitoring. Together, these measures support a more resilient digital environment and strengthen the company’s ability to safeguard information across its operations.
Commenting on the achievement, Softlogic Life Managing Director Iftikar Ahamed said trust remains fundamental to the insurance industry, extending beyond products and services to the secure management of information and the delivery of digital experiences to 1.8 million Sri Lankans.
He noted that achieving ISO/IEC 27001:2022 certification represents an important milestone in reinforcing that trust, demonstrating the company’s commitment to protecting customer information, enhancing operational resilience and ensuring that its digital transformation is supported by internationally recognised information security practices.
Ahamed also highlighted the importance of these measures as Softlogic Life continues to serve a large customer base in Sri Lanka while expanding its presence across the region, with the aim of extending its life protection services to more people.