Softlogic Life achieves ISO/IEC 27001:2022 certification, boost to regional expansion

Managing Director Iftikar Ahamed (centre) receives the ISO/IEC 27001:2022 certificate 

• Achieved first in Sri Lanka through the IO digital platform, the certification underscores the growing imperative for information security as Softlogic Life expands its digital insurance footprint beyond Sri Lanka

Softlogic Life has become the first insurance company in Sri Lanka to achieve ISO/IEC 27001:2022 certification, the internationally recognised standard for information security management, through the implementation and management of its Information Security Management System (ISMS) on the IO digital platform.

This marks a significant step in Softlogic Life’s continued efforts to strengthen information security governance, cybersecurity maturity and digital resilience across the technology environment that underpins its insurance operations and digital services.

ISO/IEC 27001:2022 is the internationally recognised standard for establishing, implementing, maintaining and continually improving an Information Security Management System, giving organisations a systematic framework to identify, assess and manage risks to the confidentiality, integrity and availability of information.

A key focus of the implementation has been strengthening internal application security, with information security principles embedded across the application lifecycle, a discipline that becomes more important as Softlogic Life’s digital platforms carry a growing share of its customer interactions, from onboarding to claims to servicing. The certification reflects the adoption of these practices across risk management, access control, vulnerability management, incident management, business continuity, supplier security and ongoing security monitoring.

Managing Director Iftikar Ahamed said: “Trust is fundamental to insurance, and today, that trust extends beyond the products and services we provide to how securely we manage information and deliver digital experiences to 1.8 million Sri Lankans. Achieving ISO/IEC 27001:2022 certification is an important milestone in strengthening that trust. It reflects our continued commitment to protecting the information entrusted to us, building greater resilience across our operations, and ensuring our digital transformation is underpinned by internationally recognised information security practices. This is particularly important given the scale of our responsibility, as Softlogic Life protects the largest number of lives in Sri Lanka, while also expanding our presence across the region to protect even more lives.”

The certification was achieved following a comprehensive implementation programme and an independent audit against the ISO/IEC 27001:2022 requirements. The implementation journey was supported by CyberLabs, Softlogic Life’s third-party information security consultant, together with IO, which provided the digital platform used to structure governance, risk management, controls, compliance requirements, documentation and evidence management throughout the process.

Chief Information Officer Amal Dharmapriya said: “This certification reflects the significant work undertaken to embed information security more deeply across our technology environment, particularly throughout the application development and operational lifecycle. By adopting a structured, risk-based Information Security Management System, we are strengthening how we identify vulnerabilities, manage emerging risks and continuously improve our controls. This gives us a stronger framework to support innovation while maintaining the security, resilience and reliability expected of our digital insurance services.”

The certification gives Softlogic Life an internationally benchmarked foundation to carry that same standard of protection into new markets, reinforcing its position as a progressive, financially strong and operationally resilient insurer and strengthening the confidence of customers, partners and stakeholders as it takes on the responsibility of protecting more lives across the region.