Suggested region and language based on your location

    Your current region and language

    Image of technology makes life so much easier.
    • Case Study
      Digital Trust

    GCash’s Journey to ISO/IEC 27001 and ISO/IEC 27701 Certification

    With BSI’s support, GCash enhanced its reputation and strengthened its information security and privacy management.

    “BSI auditors’ technical expertise delivered constructive feedback on control implementation for modern cloud and agile environments.” 

    Miguel Geronilla Chief Information Security Officer, Gcash
    Image of Joyful Asian shopping online with mobile app on smartphone together

    GCash, operated by G-Xchange, Inc., is the leading mobile wallet and fintech organization in the Philippines.

    The Challenge

    Securing Scale and Regulatory Compliance in a Rapidly Growing Digital Payments Platform

    Serving over 94 million registered customers, GCash is managing massive volumes of transactions and sensitive personal data. As GCash scaled rapidly, the organization faced the dual challenge of:

    • Integrating security and privacy controls across a complex, high-speed development environment.
    • Aligning with stringent regulatory requirements from the National Privacy Commission (NPC) and Bangko Sentral ng Pilipinas (BSP) – Central Bank of the Philippines.

     

    The Solution

    GCash Advancing Information Security and Privacy Through ISO Certification

    BSI partnered with GCash to strengthen its information security and privacy framework, supporting the achievement of ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications. Through expert guidance, auditor insights, and a robust verification process, BSI helped GCash enhance risk management, implement effective controls, and align with regulatory and stakeholder expectations while supporting rapid business growth.

    The Benefits

    Image of Two Hispanic programmers reviewing code on a laptop in a modern office
    • Icon description

      International recognitions

    • Icon description

      NPC and BSP compliant

    • Icon description

      Legal defensibility with documented evidence

    • Icon description

      Employee empowerment via training

    • Icon description

      Clear accountability

    “BSI’s validation confirmed our security risks and controls were correctly prioritized.” 

    Miguel Geronilla Chief Information Security Officer, Gcash
    Contact Us

    Let's shape your organization's future together

    Reach out and see how we can help guide you on your path to sustainable operational success.

    Get in touch - Indonesia