OSI d.o.o.

OSI d.o.o.

Speciality: Application Security Testing

Slovenia 15 employees
Visit Website View on LinkedIn
[01] About

Slovenian software development company specializing in information security, system integration, and electronic identity solutions; offers application security review, static and dynamic source code analysis, and penetration testing services; 8 employees, founded 2008, headquartered in Slovenia.

The main activity of the company is implementation and advisory services in the field of information technology and marketing of our partners solutions. Company’s operations are primarily focused on services with high added value, which are carried out in the context of integration of our knowledge and experience with products of world’s leading manufacturers, open source solutions and products and partners in local environment. Years of experience of our employees and focus on projects with high added value and extensive list of successfully completed projects enable us to acquire new opportunities in Slovenia as well as participate in projects throughout EU and other countries. Our services and solutions cover the area of high-performance and reliable systems, relational databases, application servers, systems for identity management and security of personal and other business information, the establishment and maintenance of public key infrastructure for managing digital certificates, advice and assistance in application and integration of digital certificates within customer’s environments and also customized software solutions.
[02] Services
Implementation Services
Advisory Services
Information Technology Services
Marketing Of Partner Solutions
System Integration
Maintenance Services
External Service Execution
Development Of Information Solutions
Security Consulting
Electronic Identity Systems
Electronic Signature Systems
Information Security Systems
Application Security Review
Penetration Testing
Development Of Identity Management Systems
Public Key Infrastructure Systems
Digital Certificate Integration
Custom Software Solutions
Data Warehouse Services
Application Server Services
Data Protection
Security And Compliance Services
[03] Certifications
ISO/IEC 27001

ISO/IEC 27001: Information Security Management System Certification


Origin


ISO/IEC 27001 was developed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), first published in 2005 and most recently updated in 2022. It evolved from the British Standard BS 7799, which was created in the 1990s by the UK government and industry experts to address growing information security concerns. The standard was developed to provide organizations with a systematic framework for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS), helping them protect sensitive data in an increasingly digital business environment.


Industry Value and Importance


ISO/IEC 27001 is globally recognized as the gold standard for information security management, valued because it demonstrates an organization's commitment to protecting confidential information through risk-based controls and continuous improvement. The certification is particularly important for organizations handling sensitive data, as it helps them comply with legal and regulatory requirements, win contracts (especially with government entities and large enterprises), and build customer trust. Many industries require or strongly prefer vendors with ISO 27001 certification, as it provides independent verification that appropriate security controls are in place, reducing the risk of data breaches and ensuring business continuity in the face of evolving cybersecurity threats.

ISO/IEC 20000-1
ISO 9001

ISO 9001 and Cybersecurity/IT


Origin


ISO 9001 is a quality management system standard developed by the International Organization for Standardization (ISO), first published in 1987. However, it's important to note that ISO 9001 itself is not a cybersecurity or IT-specific certification—it's a general quality management standard applicable to any industry. For cybersecurity and IT specifically, ISO created ISO/IEC 27001 in 2005, which focuses on information security management systems. ISO 9001 was created to establish consistent quality management practices across organizations worldwide, while ISO/IEC 27001 was developed to address the growing need for standardized information security controls.


Industry Value


ISO 9001 is valued across industries for demonstrating an organization's commitment to quality, customer satisfaction, and continuous improvement, which can indirectly support IT operations. For actual cybersecurity and IT security certification, ISO/IEC 27001 is the recognized standard, valued because it provides a systematic approach to managing sensitive information, demonstrates due diligence to clients and stakeholders, and is often required for government contracts or business partnerships. ISO/IEC 27001 certification signals that an organization has implemented internationally recognized security controls and risk management processes, making it essential for building trust in an increasingly security-conscious business environment.