Independent assessment validates the division’s information security governance, risk management and operational controls
Aristocrat Interactive’s Customer Experience Solutions division has achieved ISO/IEC 27001:2022 certification following an external assessment of its information security management practices.
The audit, conducted by the British Assessment Bureau, covered CXS operations across its global offices. It examined the division’s security governance, secure product development practices, risk-management processes, operational controls and procedures for protecting information.
ISO/IEC 27001:2022 is an international standard governing the establishment, implementation, maintenance and continual improvement of an Information Security Management System, or ISMS.
Independent validation of security controls
The certification provides external confirmation that CXS has introduced a formal, structured and risk-based framework for managing information security.
Its controls include processes for identifying, assessing and treating security risks, alongside defined responsibilities and governance structures throughout the division.
The framework also covers incident management, business continuity and recovery procedures intended to improve operational resilience. Internal audits, management reviews and continual monitoring will support the ongoing evaluation of these controls.
Neil Crossan, Managing Director of CXS at Aristocrat Interactive, said:
“This certification was a rigorous and in-depth process conducted by an external auditor of ISMS requirements, verifying that each of our global CXS offices has successfully implemented ISO/IEC 27001:2022.
“Achieving ISO 27001 certification represents an important milestone in our ongoing commitment to security, trust and operational excellence. It provides our customers, partners and stakeholders with independent assurance that we have established a structured and risk-based approach to protecting the information entrusted to us.”
Surveillance audits will maintain certification
ISO/IEC 27001:2022 certification is not permanent. CXS must participate in continuing surveillance audits and periodic recertification to demonstrate that its information security management framework remains effective.
Aristocrat Interactive said it will continue investing in personnel, processes and technologies as cyber threats develop. The division will also incorporate the standard’s practices into its ongoing operations and the delivery of its products and services.
Crossan added:
“Now that we have been certified to meet internationally recognised information security standards, we will embed these best practices as part of our ongoing process, further demonstrating that Aristocrat Interactive CXS continues to raise the bar on our cybersecurity capabilities.”
CXS forms part of Aristocrat Interactive, the regulated online real-money gaming division of Aristocrat Leisure. Its broader portfolio includes gaming systems, iLottery, iGaming, online sports betting, content, technology platforms and related customer-experience services.
