Skip to content
Front Page: NCSC-FI
Front Page: NCSC-FI
Go to SearchSearch
English
Menu

Accredited information security inspection bodies

We have listed the information security inspection bodies accredited by us below.

Accreditation of inspection bodies is based on the Act on Information Security Inspection Bodies.

25.2.2025 Into Certification Oy 
(formerly Huld Certification Oy)
Business ID: 3203038-6
Keilasatama 5
FI-02150 Espoo		Katakri 2020 ***),
classification levels IV and III.		Classification level II 
7.11.2023Into Certification Oy 
(formerly Huld Certification Oy)
Business ID: 3203038-6
Keilasatama 5
FI-02150 Espoo		ISO/IEC 27001:2013Classification level III 
27.6.2022KPMG IT Certification Ltd
Business ID: 2469464-1
PO Box 1037
FI-00101 Helsinki		Katakri 2020 ***),
classification levels IV and III.		Classification level II 
8.7.2021Nixu Certification Ltd
Business ID: 2623093-9
Keilaranta 15
FI-02150 Espoo		Katakri 2020 ***),
classification levels IV and III.		Classification level II 
25.6.2019Nixu Certification Ltd
Business ID: 2623093-9
Keilaranta 15
FI-02150 Espoo

Protection level IV
VAHTI ***)
KATAKRI 2015
ISO/IEC 27001:2013

Protection level III
KATAKRI 2015

Protection level II 
28.8.2017KPMG IT Certification Ltd
Business ID: 2469464-1
PO Box 1037
FI-00101 Helsinki

Protection level IV
VAHTI ***)
KATAKRI II
KATAKRI 2015
ISO/IEC 27001:2013

Protection level III
KATAKRI 2015

Protection level II 
30.6.2017Nixu Certification Ltd
Business ID: 2623093-9
Keilaranta 15
FI-02150 Espoo		Protection level IV
VAHTI ***)
KATAKRI 2015
ISO/IEC 27001:2013		Protection level III 
15.6. 2017KPMG IT Certification Ltd
Business ID: 2469464-1
PO Box 1037
FI-00101 Helsinki		Protection level IV
VAHTI ***)
KATAKRI II
ISO/IEC 27001:2013
KATAKRI 2015		Protection level III 
10.3.2017Kiwa Sertifiointi Oy
(formerly Inspecta Sertifiointi Oy)
Business ID: 1065745-2
Sörnäistenkatu 2
FI-00580 Helsinki		ISO/IEC 27001:2013Protection level III 
24.10.2016KPMG IT Certification Ltd
Business ID: 2469464-1
PO Box 1037
FI-00101 Helsinki		Protection level IV
VAHTI ***)
KATAKRI II
ISO/IEC 27001:2013
KATAKRI 2015		Protection level IIIKATAKRI 2015 competence valid until 15 June 2017
2.9.2016Nixu Certification Ltd
Business ID: 2623093-9
Keilaranta 15
FI-02150 Espoo		Protection level IV
VAHTI ***)
ISO/IEC 27001:2013		Protection level III 
2.2.2015KPMG IT Certification Ltd
Business ID: 2469464-1
PO Box 1037
FI-00101 Helsinki		Protection level IV
VAHTI ***)
KATAKRI II
ISO/IEC 27001:2013		Protection level III 
6.10.2014KPMG IT Certification Ltd
Business ID: 2469464-1
PO Box 1037
FI-00101 Helsinki		Protection level IV
KATAKRI II
VAHTI ***)		Protection level IIIAccreditation valid until 1 February 2015

*) The competence area according to which the body can perform inspections of information security.

**) The security of the body's own information handling environment is verified using the National Security Auditing Criteria (KATAKRI (External link)). The body's own information handling must fulfil requirements at one protection level higher than that for which the body has proven its competence.

***) If the competence area of the information security inspection body is VAHTI or Katakri, it can carry out the assessment of social and health care information systems and issue a certificate on their compliance with the essential requirements.

Updated