Certification is part of Tieto’s journey of continuous improvement
Tieto is a software and consulting company with approximately 13,000 employees, serving its clients through four businesses: Tieto Caretech, Tieto Banktech, Tieto Indtech and Tieto Tech Consulting. Across all of them, it maintains a broad set of ISO certifications under a single integrated management system. In its recent recertification audit, Tieto renewed its global certifications and was certified for privacy information management for the first time.
Verified from the outside, valued on the inside
At the global level, Tieto is certified to ISO 9001 for quality management, ISO 14001 for environmental management, ISO/IEC 27001 for information security and, as the newest addition, ISO/IEC 27701 for privacy information management. The businesses also hold specialised certifications that reflect their own clients and needs.
Head of Group Quality
and Assurance, Tieto
“These standards provide internationally recognised frameworks for managing areas that are fundamental to our business and our customers,” says Kateřina Hronková, Head of Group Quality and Assurance at Tieto.
The value of certification is twofold. For customers, it builds confidence that products and services are managed, controlled and continuously improved. For Tieto, it provides an independent view of whether the management system works as intended, and where processes, controls and ways of working can be developed further.
“A certificate isn’t just something to hang on the wall. The world around us is changing fast, and certification helps us show that we keep adapting.”
A partner that understands and challenges
Over the years, DNV has come to know Tieto’s organisation and management system well, which makes the audits more focused. Tieto also values DNV’s flexibility in less standard situations, such as changes to the certification scope when entities are added or separated after organisational changes, acquisitions or divestments.
DNV’s advice and the discussions on emerging topics, such as AI and its impact on management system certification, bring further value.
“A good audit shouldn’t just confirm compliance. It should challenge the organisation and ask the right questions,” Hronková says.
Forward-looking assurance
Preparing for the audit of all four global certificates was a joint effort across group functions, businesses, operations and locations. The established certifications were renewed smoothly, reflecting well-managed, long-standing management systems. For ISO/IEC 27701, the groundwork was already in place: many of the required controls existed, and the framework mainly added structure.
The audit gave Tieto a clear picture of where it stands and where it is heading: what works, and what needs to change. “Completing the recertification was a great achievement, and we’re proud of it.”
Going forward, Tieto aims to make quality and assurance even more continuous, data-driven and technology-enabled. Proactively addressing risks and delivering on customer expectations responsibly and consistently remain at the core. Audit findings, including non-conformities, play a key role in this.
“The real value of an audit is the insight we gain along the way. Every finding gives us an opportunity to improve today and prevent future challenges.”
***
Tieto provides customers across different industries with mission-critical solutions through their specialized software businesses Tieto Caretech, Tieto Banktech and Tieto Indtech as well as Tieto Tech Consulting business. Around 13 000 vertical software, design, cloud and AI experts are dedicated to empowering their customers to succeed and innovate with latest technology.
Tieto’s annual revenue is approximately EUR 2 billion. The company’s shares are traded on the NASDAQ exchange in Helsinki and Stockholm.