KPMG China has been awarded with the latest ISO/IEC 27001 certification and ISO/IEC 27701 certification

An achievement in information security management

An achievement in information security management

With the continued development of the digital economy, information protection and data privacy have garnered increased attention from the public. At the same time, the perception of data security by countries has transformed from traditional concepts of protecting personal data and corporate information to the notion of safeguarding national security. As a professional services firm, KPMG is committed to ensuring the confidentiality and safety of data our clients entrusted to us.

KPMG China has been awarded by BSI (The British Standards Institution), an internationally-recognised certification body, with the latest (published in 2022) ISO/IEC 27001 certification and ISO/IEC 27701 certification on Privacy Information Management (published in 2019).  To mark this occasion, a certification award ceremony was held in the KPMG Beijing office on 7 September. The ceremony was attended by: Jacky Zou Vice Chairman of KPMG China; Michael Huang, ITS Director of KPMG China; Glen Gao, Sophia Gan and Barbara Wang from Information Protection Group, Quality & Risk Management of KPMG China; Leon Zhang, Sales Director of BSI; John Quan, China Key Account and Channel Management Director of BSI, and Gloria Chang, Marketing Executive of BSI.

The ISO/IEC 27001 certification for Information Security Management System is based on the latest ISO requirement published in 2022, while ISO/IEC 27701 is an extension on Privacy Management System, covering KPMG China’s management of personal information processing on audit, tax and advisory services.  Together with the previously attained ISO/IEC 27017 certification on consumption and provisioning of public cloud services, and with multiple systems certified under the MLPS 2.0 Multi-Level Protection Scheme, the certifications demonstrate that KPMG China, as a data controller and a professional services firm, has a well-established data management cycle in place that adheres to international standards and is worthy of public trust.

Jacky Zou, the Vice Chairman of KPMG China, highlighted at the ceremony:


Being awarded with the certifications underlines the effective collaboration and joint efforts between Quality and Risk Management, Information Technology Services and KPMG Digital Ignition (KDi), with guidance and support from Benjamin Tang, National IT Security Officer, Pohhua Tan, National Privacy Liaison Officer, and other management. Looking ahead, KPMG will continue to be attentive to other industrially-recognised trends and certification requirements, and keep abreast of the latest technology developments to provide customers with more creditable services.


Benjamin Tang, National IT Security Officer:


The successful enhancement and scope expansion of the Information Security Management System certification not only demonstrates KPMG’s commitment to protecting business and personal information entrusted by clients, but also proves its abilities in doing so. Going forward, KPMG will continue to uphold its commitment to enhancing our governance on information protection and personal data privacy.


Pohhua Tan, National Privacy Liaison Officer:


KPMG has always been committed to continuously strengthening our measures on information governance, attaching great importance to privacy and information security trainings for employees, and conducting Privacy Impact Assessments on any collection or processing of personal information so as to ensure the full implementation of data life-cycle management ─ from risk identification, analysis, evaluation and processing to regular review of risks.


Leon Zhang, Sale Director of BSI:


I am honoured to take part in the certificate award ceremony of KPMG China. KPMG as a global brand in providing professional services and being awarded with ISO/IEC 27001:2022 Information Security Management System certification and ISO/IEC 27701 Privacy Information Management System certification, fully demonstrates its dedication and proactive approach to having its management systems aligned with international standards. On behalf and representing BSI and the audit team, I would like to express our sincere congratulations to KPMG China.


Media inquiries

Gemma Ho
+852 3927 3171

Connect with us

About KPMG China

KPMG China has offices located in 31 cities with over 15,000 partners and staff, in Beijing, Changchun, Changsha, Chengdu, Chongqing, Dalian, Dongguan, Foshan, Fuzhou, Guangzhou, Haikou, Hangzhou, Hefei, Jinan, Nanjing, Nantong, Ningbo, Qingdao, Shanghai, Shenyang, Shenzhen, Suzhou, Taiyuan, Tianjin, Wuhan, Wuxi, Xiamen, Xi’an, Zhengzhou, Hong Kong SAR and Macau SAR. Working collaboratively across all these offices, KPMG China can deploy experienced professionals efficiently, wherever our client is located.

KPMG is a global organization of independent professional services firms providing Audit, Tax and Advisory services. KPMG is the brand under which the member firms of KPMG International Limited (“KPMG International”) operate and provide professional services. “KPMG” is used to refer to individual member firms within the KPMG organization or to one or more member firms collectively.

KPMG firms operate in 143 countries and territories with more than 273,000 partners and employees working in member firms around the world. Each KPMG firm is a legally distinct and separate entity and describes itself as such. Each KPMG member firm is responsible for its own obligations and liabilities.

KPMG International Limited is a private English company limited by guarantee. KPMG International Limited and its related entities do not provide services to clients.

In 1992, KPMG became the first international accounting network to be granted a joint venture license in the Chinese Mainland. KPMG was also the first among the Big Four in the Chinese Mainland to convert from a joint venture to a special general partnership, as of 1 August 2012. Additionally, the Hong Kong firm can trace its origins to 1945. This early commitment to this market, together with an unwavering focus on quality, has been the foundation for accumulated industry experience, and is reflected in KPMG’s appointment for multidisciplinary services (including audit, tax and advisory) by some of China’s most prestigious companies.