18
In telecommunications, what decides is not processing data but actually operating the communications infrastructure or service. A software company processing customer data and a telecom operator running a network are not in the same record set.
It is an information security control guideline for telecommunications organisations, a sector extension of ISO/IEC 27002, not a standalone Type A management system standard, although it is frequently marketed as a separate certificate.
A software company processing customer data is not in the same record set as an operator running the communications infrastructure itself; the operator carries separate obligations specific to network operation.
No verified candidate standards are mapped to this sector yet.
These are not ISO standards; each has its own scheme owner, issuing body and rules. Whether they are candidates is decided by activity and buyer requirement.
ISMS-P is South Korea's integrated certification for information security and personal-data management, statutory for defined ICT operators.
SCS 9001 is TIA's certifiable cyber and supply chain security standard for the ICT industry, with optional benchmarking across supply chains.
TL 9000 is TIA QuEST Forum's ICT-industry certification, extending ISO 9001:2015 with telecom-specific requirements for certified organizations.
NESAS is GSMA's voluntary security assurance scheme for mobile network equipment — it audits vendor processes and evaluates products, issuing no certificate.
Last verified:
This page is for information only; it is not legal advice. A record appearing here does not mean it is required for your business. This library does not issue certificates.
Attributing this record helps other researchers verify it independently.
"Telecommunications." Certifidex, FutureTechnologies. Last verified 23 August 2026. https://certifidex.com/sectors/telecommunications