The Kitemark is a voluntary certification scheme. It is only available from BSI and our impartiality and independence help uphold its core values of quality, safety and trust. There is a rigorous process that providers of apps and online transactions need to undergo to achieve the BSI Kitemark. Assessments are regularly carried out and this is an ongoing process to maintain high levels of security. If these fail to be met a Kitemark license could be taken away.
The assessment involves organizations achieving and maintaining certification to ISO 27001 for the parts of the business that handles confidential data, as well as undergoing rigorous internal and external penetration tests which scan for vulnerabilities and security flaws.
This is why the BSI Kitemark has been considered one of the most robust marks of trust for over a century and it continues to be relevant to both consumers and businesses today. It can protect consumers and helps them to make more informed product choices, and it helps businesses reduce their risk and enhance their reputation. So when integrity matters most, trust the BSI Kitemark.