SGS Awards ISO/IEC 27001:2022 Information Security Management Systems Certification to the Hong Kong Police Force’s CSTCB

We are pleased to announce that in February 2025, SGS awarded ISO/IEC 27001:2022 certification to the Cyber Security and Technology Crime Bureau’s (CSTCB) Forensic Investigation Section of the Hong Kong Police Force. The certification showcases the professionalism of CSTCB’s management of information security, as well as its data acquisition and analysis processes.

Over the years, CSTCB has been providing professional digital forensics services to the Force. In July 2023, the Digital Forensics Complex (DFC) was launched, introducing new systems and workflows to replace the old laboratory and computer systems that had been in use for many years. Consequently, CSTCB established a series of policies, procedures, and control measures related to information security, based on the new standards set under ISO/IEC 27001 in 2022. 

After a year of preparation, DFC successfully passed a third-party independent information security assessment conducted by SGS and obtained ISO/IEC 27001 Information Security Management Systems Certification, after having previously been certified in 2016. This certification covers the management activities of information security in the Digital Forensics Laboratory System (DFLS), preserving the confidentiality, integrity and availability of information in the DFC.  

At the presentation ceremony on April 2, Chief Superintendent of CSTCB Lam Cheuk-ho received the certificate of accreditation from Mr. Tam Wan-tsung, Section Manager of Account Management for Business Assurance at SGS in Hong Kong. This was witnessed by Assistant Commissioner of Police (Crime) Chung Wing-man and Mr. Ben Tsang, Vice President, Regional Head of Business Assurance in APAC at SGS.