ISO 22301 is the international standard for Business Continuity Management Systems (BCMS), focusing on an organization’s ability to continue operating during and after disruptive incidents or disasters.

From Information Security to Business Continuity

While ISO 27001 primarily focuses on confidentiality, integrity, and availability of information, ISO 22301 emphasizes organizational readiness to ensure business operations continue even after disasters, infrastructure failures, human error, or unexpected system disruptions.

For VELO, this certification is especially important. As a managed service provider, VELO operates and manages many business-critical applications and systems entrusted by customers. These systems are often the backbone of customer operations, making service continuity an essential responsibility.

Preparing for Unexpected Scenarios

As part of the certification process, the team analyzed multiple disaster scenarios and designed mitigation and recovery strategies for each possibility.

Potential incidents such as:

• Fire
• Flood
• Power outages
• Equipment failures
• Infrastructure disruptions

were carefully evaluated to ensure they would not significantly impact customer business operations.

In situations where disruptions could not be completely avoided, VELO focused on ensuring recovery could be performed as quickly as possible while minimizing data loss and operational downtime.

Managed Service Team Takes the Lead

If the ISO 27001 project was largely driven by the NOS team, the ISO 22301 initiative placed the Managed Services team at the center of the process.

Teams responsible for cloud infrastructure, SaaS platforms, backup systems, and data center electrical facilities became heavily involved in ensuring operational resilience and disaster recovery readiness.

Reviewing Procedures and Infrastructure

Throughout the preparation phase, numerous procedures were reviewed and validated to ensure they accurately reflected actual operational conditions in the field.

Reporting formats, SOPs, systems, and infrastructure were re-evaluated and improved where necessary. Adjustments and additional safeguards were implemented to ensure all procedures would remain effective and applicable during real disaster situations.

The objective was not only to build documentation for compliance purposes, but to ensure every process could truly function under emergency conditions.

Intensive Preparation and BCP Simulation

The certification process required intensive coordination across multiple teams. Meeting after meeting was conducted, and overtime work became unavoidable to ensure that no critical process was overlooked.

As part of the readiness validation, VELO also conducted a Business Continuity Plan (BCP) simulation at its TB Simatupang data center facility. The simulation tested disaster scenarios involving fire incidents and PLN power outages.

During the exercise, the teams validated:

• Data center facility protection procedures during fire incidents
• Staff evacuation processes
• System recovery procedures at the secondary data center
• Service failover mechanisms
• Operational readiness of systems running from the backup data center

The simulation became an important milestone in proving VELO’s operational resilience and recovery capabilities.

Officially Certified

After months of hard work, preparation, testing, and evaluation, BSI Group officially declared on February 13th, 2026, that VELO had successfully met the requirements for ISO 22301 certification.

The official ISO 22301 certificate was subsequently issued on March 27th, 2026.

A Stronger and More Resilient VELO

Achieving ISO 22301 certification represents another major milestone for VELO. It demonstrates the company’s commitment not only to information security, but also to operational resilience, disaster recovery readiness, and service continuity for all customers.

With both ISO 27001 and ISO 22301 certifications, VELO strengthens its position as a trusted and reliable managed services provider capable of supporting mission-critical business operations.

Congratulations to VELO on this remarkable achievement!

The certification recommendation was issued by BSI Group after a long and demanding assessment process that required months of preparation, coordination, and dedication from VELO’s internal ISO team.

What is ISO 27001?

SO 27001, formally known as ISO/IEC 27001, is an international standard for Information Security Management Systems (ISMS).

It provides a structured framework for organizations to protect their information assets through policies, procedures, risk management, and security controls.

The standard is jointly published by ISO and the International Electrotechnical Commission.

What ISO 27001 Covers?

ISO 27001 focuses on protecting three main aspects of information security:

• Confidentiality — ensuring information is only accessible to authorized people.
• Integrity — ensuring data remains accurate and unaltered.
• Availability — ensuring systems and information remain accessible when needed.

Starting the Journey

The journey began in July 2025. Guided by external consultants, the ISO team started a comprehensive review of all operational processes related to the requirements of ISO 27001.

Every workflow was carefully evaluated to ensure alignment with existing Standard Operating Procedures (SOPs). Whenever inconsistencies were found, the SOPs were revised and improved. In cases where operational activities had not yet been formally documented, entirely new SOPs were developed.

Building Stronger Processes and Documentation

Beyond documentation, the team also worked intensively to design supporting forms, reporting templates, and approval mechanisms required to ensure compliance with the information security management framework.

Another critical aspect of the preparation involved strengthening transactional processes with customers and supporting vendors, ensuring that all engagements were backed by clear legal documentation capable of protecting the interests of VELO and all related parties.

Infrastructure and System Readiness

Meanwhile, the Network Operation Support (NOS) team played a crucial role in ensuring that all infrastructure, devices, and systems complied with standardized security configurations.

In several cases, this required additional equipment deployment and reconfiguration of existing systems to meet the expected standards.

Collecting Operational Evidence

One of the most demanding parts of the certification process was not only creating documentation, but also proving that the documented procedures were consistently implemented in daily operations.

To support the audit process, the team diligently archived system performance logs, data center visitor records, maintenance and change activity logs, as well as incident and error reports. These records became essential evidence demonstrating operational compliance with the established SOPs.

A Full-Team Commitment

The certification effort quickly became a top organizational priority. Team members worked full days and frequently extended their efforts beyond normal working hours.

Due to the importance of the project, management even instructed key personnel involved in the certification process to postpone leave requests until the audit was completed.

The Final Result

At the end of the audit process, following a modest but meaningful celebration, the BSI audit team officially granted “Recommended” status for PT NetToCyber Indonesia to receive ISO 27001 certification.

During the celebration, VELO’s management also expressed appreciation to individuals and teams who made significant contributions throughout the journey.

A New Milestone for VELO

Achieving ISO 27001 certification marks an important milestone for VELO, reflecting the company’s commitment to information security, operational excellence, and continuous improvement.

Congratulations to VELO on this remarkable achievement!

As part of VELO 22nd years anniversary and the transformation of the industry to new age driven by the digitalization, VELO moved to new stage with our New Brand which effective on July 06th, 2023.

This rebranding is part of VELO commitment to enable our customer to connect with Digital World and transform business to the new level with new spirit It is Time To Move On.

We socialize the rebranding program through formal seminar and informal events by experiential marketing through community program. The rebranding through with Digital Transformation Seminar collaborated with strategic partners. Experiential community program started by engaging with customers through a trekking expedition to Remote Village, West Java and continued in Bali which we combine between riding adventure to Banyuwangi and Trekking Expedition to Kawah Ijen.

The purpose of the series of VELO Rebranding program, beside socialize our new goals are to delivering exceptional eperience to maintain relationship with existing customers to retain our service year by year.

Digital Transformation Seminar; Unlocking the Potential of Your Business

The event was taking place in St. Regis Hotel Jakarta on 6 July 2023, collaborated with our strategic partners such as: Huawei Cloud as our key presenter, SAP B1, ELO Digital Office, DocuSign, Cartrack, NetPluZ (Security Solution) and Building Automation.

Attended by 80 participants represent 58 companies, during event we get enthusiast feedback from participants for the initiatives to move to digital age.

Experiential Marketing Through Community Program

The rebranding roadshow continued with community program, with trekking interest that the program is VELOTreX: Trekking Expedition in Cisadon, Sentul that held on 2-3 September,2023. We engaged with our major customers in Jakarta with reached of Bukit Cisadon ±16 km. During program the participant feel new experience of the beauty nature at Bukit Cisadon, West Java.

Unforgettable Experience

The next roadshow, company select destination of event in Bali because as second city that contribute more revenue beside Jakarta. We define the program with different experience from previous year that the program is combined between VELOMoVe (Riding Adventure) and VELOTreX (Trekking Expedition) with destination from Bali to Banyuwangi which we explored the exotic of Banyuwangi such as: De Djawatan forest and Blue Fire at Kawah Ijen. The events held on October 28-29, 2023, engaged with our value customers from 50 participants represent 25 companies.

VELOMoVe Banyuwangi reach of 380km starting: Kuta – Bedugul – Banyuwedang via Munduk – Seririt – Gilimanuk – Ketapang – Tamansari – Ketapang – Gilimanuk – Negara – Kuta. VELOTreX Kawah Ijen reach ±18km, starting from Paltuding at 01.30 WIB and continued trekking to reach Blue Fire as rare phenomenon which there are only two in the world, in Ijen Mountain and Iceland, all participants can enjoy the mesmerizing beauty of the Kawah Ijen, as well as enjoy the beauty of the morning break.

Evolve Brand (LoveVELO) Through Customer Experience

This event is not only a means to strengthen relationships with colleagues, but also a place for relaxation and refreshing in the face of a busy work routine. “Thank you VELO Teams, all out for this 2-day event, amazing and well done. Thank you also Road Captain and team for making sure our riding was safe,” said Mr. Ketut Surya, one of the IT Managers at The Laguna Resort & Spa Hotel, Bali.

Our next roadshow, we will held Digital Transformation Seminar at Balikpapan. This program aims the process of implementing digital technologies in order to enhance their operation, and improve their bottom line.

LoveVELO is our new value that means Learning from mistake to deliver best produ

But our rebranding wasn’t only about seminars and presentations. We wanted to create experiences that connect people. That’s why we introduced VELOMoVe and VELOTreX, a series of community programs combining trekking and riding adventures.

In September, we trekked through Bukit Cisadon, Sentul, with customers from Jakarta. The 16 km journey gave everyone a chance to enjoy nature while building stronger bonds. Then in October, we took things further with a two-day adventure in Bali and Banyuwangi. From riding 380 km across Bali to exploring the magical Blue Fire of Kawah Ijen, it was an unforgettable experience. As one participant said, “Thank you VELO Teams, all out for this 2-day event, amazing and well done.”

Through these journeys, we introduced our new value: LoveVELO. It stands for:

• Learning from mistakes to deliver the best service
• Operation excellence to stay competitive
• Value creation through customer intimacy
• Extra mile support for customer satisfaction

This is more than a slogan. It’s our promise to redefine customer experience and bring relationships to the next level.

VELO’s rebranding is about moving forward with new spirit. It’s about creating moments that matter, building trust, and helping businesses unlock their digital potential. And this is only the beginning — we will continue to bring more experiences, more innovation, and more value to all our partners and customers

The drill was designed to simulate real incidents that could potentially affect data center operations. Instead of treating it like a formal test, the entire activity became a valuable learning experience for everyone involved.

Simulating a Power Failure

The first scenario focused on a complete power outage in our data center environment. The goal was simple: ensure that all critical systems could continue running without interruption even if the main power source failed.

During the simulation, the team intentionally disconnected the main power source to observe how the backup systems responded. Our UPS systems immediately switched to battery mode while the backup generator prepared to take over the load. Within seconds, the generator became active and restored stable power to the data center.

The engineering and monitoring teams carefully watched every transition — from PLN power to battery mode, from battery mode to generator power, and finally back to normal conditions. Throughout the process, all monitoring dashboards and customer services continued operating normally without noticeable disruption.

We also tested redundancy by shutting down one UPS unit while another backup UPS handled the workload automatically. The transition happened smoothly, showing that the backup design worked as expected.

Of course, not everything was perfect. During the first attempt, the generator did not immediately activate because of a configuration issue in the ATS panel. The team quickly identified the root cause, corrected the configuration, and repeated the test successfully. This became an important reminder that even small details matter in disaster recovery preparation.

Simulating a Fire Emergency

The second scenario was even more challenging. This drill simulated a fire incident inside one of the data center racks. The objective was not only technical recovery, but also emergency response coordination and disaster recovery execution.

The simulation began when smoke detectors triggered an alarm in the control room. The emergency alert system activated immediately, and our operations team worked together with security personnel to evacuate everyone from the affected area. At the same time, the NOVEC1230 fire suppression system was activated to contain the simulated fire before it could spread further.

After the evacuation was completed, the BCP coordinators officially declared a disaster condition and activated the Disaster Recovery Plan (DRP). Teams responsible for cloud services and managed services then prepared to move operations to the disaster recovery site.

The recovery teams traveled to the backup data center location, verified server conditions, checked backups, and ensured that applications and databases could run properly from the recovery environment. Once everything was ready, VPN connections were redirected so users could reconnect to services through the DR site.

One of the most satisfying moments during the drill was when users successfully accessed the applications again from the backup location. This proved that the recovery procedures were working and that service continuity could be maintained even during a serious incident.

More Than Just a Drill

What made this exercise meaningful was not only the technology, but also the teamwork behind it. Every department had a role — from data center engineers and NOC operators to security personnel, cloud teams, and communication coordinators.

The drill also helped us identify areas for improvement. Faster coordination, clearer communication, and more structured DR procedures are some of the lessons we will continue improving in future simulations.

At VELO, we believe preparedness is part of delivering trusted services. A disaster recovery plan should never exist only on paper — it must be tested, practiced, and continuously improved.

Because when unexpected situations happen, preparation makes all the difference.