FVB bolster information security with ISO 27001

Requirements for information security have been tightened considerably in recent years. FVB has now gained certification according to ISO 27001 – an international standard that structures and quality assures working with information security through risk analyses, security controls and continuous improvement.

“FVB has worked systematically to protect systems and data for many years, but recent changes in requirements and expectations from society in general and customers specifically in this area have increased in recent times, causing us to opt for certification within information security,” says Per Skoglund, CEO at FVB.

The ISO 27001 standard is structured in much the same way as other ISO standards and is based to a large degree on risk analyses. A key element of the standard is the security controls built into the Statement of Applicability (SOA).

There is a total of 93 such controls, which are risk-assessed and which require security measures to be implemented where necessary.

“A large number of the controls relate to IT, but ISO 27001 is very comprehensive and covers everything from physical security to increasing awareness amongst personnel, incident management, supplier management and legal requirements,” says Ronny Eklund, IT Manager at FVB.

FVB was certified in November 2025 after an extensive process started in 2024.

“The security process continues now based on a culture in which information security is a natural part of the working day for all FVB employees,” adds Ronny Eklund.

FVB has 150 employees working at ten offices in Sweden, all of whom have been through basic security training supplemented by regular ‘nano’ training courses to increase awareness and engagement related to security issues. Personnel working with security-classified tasks also undergo more in-depth training.

“Certification has increased awareness throughout the company of these issues. Conducting regular audits provides proof that we are doing things right and lays down an excellent foundation for continuous improvement,” concludes Per Skoglund.

Facts about FVB’s certifications
FVB achieved certification according to ISO 27001, the standard for Information Security Management Systems (ISMS), in November 2025. The company has previously achieved certification for quality (ISO 9001), environment (ISO 14001) and occupational health and safety (ISO 45001).

More information:
Per Skoglund, CEO, +46 (0)21-81 80 52
Ronny Eklund, IT Manager, +46 (0)21-81 80 51