Edit: TBF, they're ISO 27001 certified. Such cybersecurity! :P
https://www.danfoss.com/en/about-danfoss/news/cf/danfoss-rei...
Edit: TBF, they're ISO 27001 certified. Such cybersecurity! :P
https://www.danfoss.com/en/about-danfoss/news/cf/danfoss-rei...
Never assume that having that certification means that shit is actually secure. It just means the company can do the audit dance.
Always leave an obvious-once-you-see-it, but minor, defect somewhere for the auditor to latch on to. One they can earmark for you to come up with a plan to address the issue before they grant you the certificate (and which you'll be able to write up in no time because you planned for it).
A good auditor and a company actually taking this stuff seriously can benefit from 27001. That probably accounts for 5% of all 27001 certifications out there.
If you're lucky you get an auditor who's just there along for the ride towards early retirement in a few years, and who'll joke with you and eat your lunch. Had one of those once. Doesn't help your security one bit of course, but it makes audit time more relaxed.
But then, no other kind of auditor do either...