GMV extends ISO/IEC 27001:2022 certified ISMS scope to its UK operations

GMV has successfully extended the scope of its ISO/IEC 27001:2022 Information Security Management System (ISMS) certification to include its operations in the United Kingdom, marking a significant milestone in the company's international growth and commitment to information security.

The extension of the certified scope demonstrates GMV's ability to apply consistent information security governance, risk management and operational controls across international locations, supporting customer confidence in the delivery of critical programmes and services, following an independent external audit conducted by AENOR, an internationally recognised certification body.

The UK office becomes the first GMV subsidiary outside Spain to be incorporated into the scope of the Group's certified ISMS, reflecting the company's ability to deploy consistent security processes, controls and governance practices across its international operations.

The certification confirms that information security risks are systematically identified, assessed and managed through a structured governance framework and continuous improvement processes.