Riphah International University’s ITIC Department Successfully Completes ISO 27001:2022 Recertification Audit
Friday, 9th October 2026
Riphah International University has successfully completed its ISO 27001:2022 recertification audit, conducted by SGS in October 2026, marking a significant milestone in the University’s ongoing commitment to information security, digital infrastructure resilience, and continual improvement.
Led by the Information Technology Infrastructure & Communication (ITIC) Department, this achievement reflects the University’s continued efforts to maintain and strengthen its Information Security Management System (ISMS). Following its initial certification in 2023, the successful audit supports the continuation of the University’s information security certification for the next three-year cycle.
ITIC Department Advances Information Security Standards
The ITIC Department plays an important role in supporting the University’s technology infrastructure, communication systems, and information security initiatives. The successful recertification audit demonstrates the continued focus on maintaining effective information security controls and protecting the University’s information assets and systems.
The external audit was completed successfully, with only one minor nonconformity identified. The SGS auditor conducted a detailed assessment of information security management practices, controls, and supporting processes against the requirements of ISO 27001:2022.
Key areas reviewed during the audit included:
- Corrective actions: Verification of the effective implementation of measures addressing previously identified nonconformities.
- Certification scope: Assessment of the continued suitability of the existing certification scope.
- Audit objectives: Verification that the defined audit objectives were achieved.
- Audit plan: Confirmation that the audit was conducted in accordance with the agreed plan.
- Internal audit programme: Review of the programme and its adequacy.
- Previous audit findings: Assessment of outstanding issues and the actions taken to address them.
Strengthening Digital Security and Institutional Resilience
Through its information security efforts, the ITIC Department supports the University's commitment to safeguarding sensitive information, strengthening security controls, and maintaining reliable technology-enabled operations.
An effective Information Security Management System provides a structured approach to identifying and managing information security risks. It also reinforces the importance of preserving the confidentiality, integrity, and availability of information and systems across the University.
The recertification audit further highlights the importance of coordinated efforts across departments in maintaining information security practices and fostering a culture of accountability and continual improvement.
Leadership and Teamwork Behind the Achievement
The University extends its sincere appreciation to its leadership for its guidance and continued support throughout the recertification process. Recognition is also extended to the ITIC Department, University management, and all concerned departments for their cooperation, contributions, and collective efforts in facilitating the successful audit.
The achievement was shared by Mr. Sarfraz Haroon, Director ITIC, who acknowledged the collaborative efforts that contributed to this important milestone.
Riphah International University congratulates everyone involved in the successful recertification and reaffirms its commitment to maintaining robust information security standards, strengthening its digital infrastructure, and continually improving the protection of institutional information assets.