MiHoYo Achieves ISO 27001-27701

This article contains AI-generated translation.

 Author
 Published

近日，米哈游正式通过ISO双认证，获得由国际知名专业风险管理服务机构英国标准协会（BSI）官方颁发的 ISO/IEC27001信息安全管理体系认证证书和ISO/IEC27701隐私信息管理体系认证证书。
miHoYo has recently obtained dual certification of ISO standards, receiving the ISO/IEC 27001 Information Security Management System Certification and the ISO/IEC 27701 Privacy Information Management System Certification, officially issued by the internationally renowned professional risk management service organization, the British Standards Institution (BSI).

ISO/IEC 27001信息安全管理体系认证是国内和国际上针对信息安全领域广泛接受和应用的体系认证。此次米哈游获得ISO/IEC 27001和27701双认证，标志着米哈游安全管理体系已达到国际标准，能够为用户提供更安全、更可靠的服务和解决方案，也用实际行动诠释了“预防为主、 风险管控、持续改进、高效稳定、保护隐私、提高意识” 的信息安全方针。
The ISO/IEC 27001 Information Security Management System Certification is widely accepted and applied in the field of information security, both domestically and internationally. miHoYo's achievement of dual certification of ISO/IEC 27001 and 27701 signifies that its security management system meets international standards. This certification enables miHoYo to provide users with more secure and reliable services and solutions, demonstrating their commitment to information security policies such as "prevention-oriented approach, risk management, continuous improvement, efficiency and stability, privacy protection, and raising awareness."

米哈游通此次获得ISO/IEC 27001和27701双认证，认证内容包含米哈游用户相关的信息内容及大数据平台系 统，这是米哈游业务发展中的安全保护工作的重要里程碑，意味着米哈游具备了完善的信息安全管理体系，结合信息安全纵深防御能力和信息安全技术架构，更好地保护公司信息资产，提升公司系统安全性，为米哈游的业务的发展提供了强有力的安全保障。
Through obtaining the dual certification of ISO/IEC 27001 and 27701, miHoYo's certification scope covers user-related information content and the big data platform system. This milestone in miHoYo's business development highlights the importance of security protection and signifies the establishment of a comprehensive information security management system. With a combination of deep defense capabilities and information security technology architecture, miHoYo can better protect company information assets, enhance system security, and provide strong security guarantees for the company's business growth.

一直以来，米哈游都十分重视用户隐私信息保护。不仅在自身的产品的功能设计、研发以及运营管理等每个环节严格执行对用户隐私数据的保护，而且建立了一套涵盖数据收集、存储、使用、传输等全生命周期的隐私信息安全管理体系，为用户个人隐私信息保驾护航。
miHoYo has always placed great emphasis on protecting user privacy information. Not only do they strictly implement privacy data protection in the design, development, and operation of their products, but they have also established a privacy information security management system that covers the entire lifecycle of data collection, storage, usage, and transmission. This system serves to safeguard users' personal privacy information.

英国标准协会（BSI）官方评价称：“为了获得基于该标准的认证，米哈游接受了全方位的评估，包括严格的现场审核，涵盖了ISO/IEC 27001和ISO/IEC 27701的所有要求。能够最终通过并获得信息安全管理体系认证和隐私信息安全管理体系的认证，米哈游证明了他们正在采取积极主动的数据保护方法，帮助与利益相关方建立信任和透明度。”
The official evaluation from the British Standards Institution (BSI) states, "To achieve certification based on these standards, miHoYo underwent a comprehensive assessment, including rigorous on-site audits covering all the requirements of ISO/IEC 27001 and ISO/IEC 27701. By ultimately obtaining certification for the Information Security Management System and the Privacy Information Security Management System, miHoYo has demonstrated that they are taking a proactive approach to data protection, helping to build trust and transparency with stakeholders."