Since 17 March 2022, the information security management system (ISMS) implemented by the Restena Foundation for the management and operation of the .lu top-level domain registry and for its IT network, hosting and security services - including supporting processes - has been certified according to ISO/IEC 27001:2013. 

A trusted organisation 

For Restena, the ISO 27001:2013 certification fits its ambition to integrate additional security into the heart of its activities. Its objectives are to better identify security risks, to set up even more effective control measures, and by extension, to increase confidence in its services. 

Implementation of an ISO 27001-certified information security management system is a crucial step. It minimises security risks, ensures business continuity and assures a good global management and continuous improvement of security.

Regulatory compliance

With the management of the .lu infrastructure and the operation of critical services in the context of .lu registry activities, the certification has proven to be helpful in demonstrating compliance regulations. Among them, the Network and Information Systems Security Act ("NIS Act") and the European Data Protection Regulation (GDPR) provided the framework for Restena's work throughout its certification process.

Structured and improved security processes

Policies and procedures were reviewed, and implemented after thorough scrutiny, in alignment with Restena’s collaborative culture. With the ISO 27001 certification, the security processes implemented by Restena have been proven effective.

• Restena provides an efficient and secure Domain Name System (DNS).
• Restena provides a network service with high reliability and efficiency.
• Restena respects and complies with regulations and standards.

In the months and years to come, the challenge will be to monitor and continuously improve the process.