After successfully completing the ISO 27001 certification process, VELO (PT NetToCyber Indonesia) immediately moved forward to the next milestone: ISO 22301 certification.
ISO 22301 is the international standard for Business Continuity Management Systems (BCMS), focusing on an organization’s ability to continue operating during and after disruptive incidents or disasters.
From Information Security to Business Continuity
While ISO 27001 primarily focuses on confidentiality, integrity, and availability of information, ISO 22301 emphasizes organizational readiness to ensure business operations continue even after disasters, infrastructure failures, human error, or unexpected system disruptions.
For VELO, this certification is especially important. As a managed service provider, VELO operates and manages many business-critical applications and systems entrusted by customers. These systems are often the backbone of customer operations, making service continuity an essential responsibility.
Preparing for Unexpected Scenarios
As part of the certification process, the team analyzed multiple disaster scenarios and designed mitigation and recovery strategies for each possibility.
Potential incidents such as:
- Fire
- Flood
- Power outages
- Equipment failures
- Infrastructure disruptions
were carefully evaluated to ensure they would not significantly impact customer business operations.
In situations where disruptions could not be completely avoided, VELO focused on ensuring recovery could be performed as quickly as possible while minimizing data loss and operational downtime.
Managed Service Team Takes the Lead
If the ISO 27001 project was largely driven by the NOS team, the ISO 22301 initiative placed the Managed Services team at the center of the process.
Teams responsible for cloud infrastructure, SaaS platforms, backup systems, and data center electrical facilities became heavily involved in ensuring operational resilience and disaster recovery readiness.
Reviewing Procedures and Infrastructure
Throughout the preparation phase, numerous procedures were reviewed and validated to ensure they accurately reflected actual operational conditions in the field.
Reporting formats, SOPs, systems, and infrastructure were re-evaluated and improved where necessary. Adjustments and additional safeguards were implemented to ensure all procedures would remain effective and applicable during real disaster situations.
The objective was not only to build documentation for compliance purposes, but to ensure every process could truly function under emergency conditions.
Intensive Preparation and BCP Simulation
The certification process required intensive coordination across multiple teams. Meeting after meeting was conducted, and overtime work became unavoidable to ensure that no critical process was overlooked.
As part of the readiness validation, VELO also conducted a Business Continuity Plan (BCP) simulation at its TB Simatupang data center facility. The simulation tested disaster scenarios involving fire incidents and PLN power outages.
During the exercise, the teams validated:
- Data center facility protection procedures during fire incidents
- Staff evacuation processes
- System recovery procedures at the secondary data center
- Service failover mechanisms
- Operational readiness of systems running from the backup data center
The simulation became an important milestone in proving VELO’s operational resilience and recovery capabilities.
Officially Certified
After months of hard work, preparation, testing, and evaluation, BSI Group officially declared on February 13th, 2026, that VELO had successfully met the requirements for ISO 22301 certification.
The official ISO 22301 certificate was subsequently issued on March 27th, 2026.
A Stronger and More Resilient VELO
Achieving ISO 22301 certification represents another major milestone for VELO. It demonstrates the company’s commitment not only to information security, but also to operational resilience, disaster recovery readiness, and service continuity for all customers.
With both ISO 27001 and ISO 22301 certifications, VELO strengthens its position as a trusted and reliable managed services provider capable of supporting mission-critical business operations.
Congratulations to VELO on this remarkable achievement!