Financial tech provider strengthens SaaS resilience with security standard recertification

Phoebus has announced that it has achieved recertification to the updated ISO 27001:2022 standard, underlining its long-standing commitment to safeguarding client and customer data against evolving cyber threats.

The global standard, which sets out best practice for information security management, was revised in 2022 to reflect the changing digital landscape. The new framework introduces enhanced controls for cloud-native services, threat intelligence, data leakage prevention, and incident response – areas that are critical to modern SaaS operations.

Phoebus has held ISO 27001 certification for nearly a decade. Securing the latest recertification ensures the company continues to operate at the highest levels of security resilience, particularly for its SaaS mortgage servicing and lending platform.

Warren Higgins (pictured), chief information officer at Phoebus, says: “For us, ISO 27001:2022 isn’t simply a certificate for the wall. It is the blueprint we follow every single day to keep our platform secure. The process challenged us to scrutinise emerging threats like never before, particularly in cloud security and threat intelligence.

“It was a demanding effort, but one that fundamentally strengthens the resilience and trustworthiness of our SaaS offering for every client.”

Key enhancements in the 2022 update include:

• Threat intelligence – moving from defending against known threats to proactively identifying and preparing for new ones.
• Cloud-native security – ensuring infrastructure is designed for resilience in line with today’s SaaS delivery models.
• Data leakage prevention – strengthened measures to reduce risk of accidental or malicious data exposure.
• Preparedness and response – more rigorous incident response planning to minimise disruption to clients.

This latest accreditation marks another milestone in Phoebus’ ongoing security journey, giving lenders and financial services providers confidence that their operations are supported by robust, internationally recognised standards.