The ISO Survey of Management System

Standard Certifications (2006-2014)

ISO/IEC 27001 - Information technology - Security techniques - Information
security management systems - Requirements
Overview - tables
Countries
Certificates by industrial sector
Top five industrial sectors
Number of sites
Withdrawn certificates
Certificates - worldwide total - diagram
Regional share - diagram
World annual growth (in %) - diagram
Number of countries / economies - diagram

ISO/IEC 27001 - Information technology - Security techniques - Information

security management systems - Requirements

Year
TOTAL
Africa
Central / South America
North America
Europe
East Asia and Pacific
Central and South Asia
Middle East

2006

2007

2008

2009

2010

2011

5797

7732

9246

12935

15626

17355

6
18
79
1064
4210
383
37

10
38
112
1432
5550
519
71

16
72
212
2172
5807
839
128

47
100
322
3563
7394
1303
206

46
117
329
4800
8788
1328
218

40
150
435
5289
9665
1497
279

Regional share - in %
Year

2006

2007

2008

2009

2010

2011

TOTAL

100%

100%

100%

100%

100%

100%

Africa
Central / South America
North America
Europe
East Asia and Pacific
Central and South Asia
Middle East

0.1%
0.3%
1.4%
18.4%
72.6%
6.6%
0.6%

0.1%
0.5%
1.4%
18.5%
71.8%
6.7%
0.9%

0.2%
0.8%
2.3%
23.5%
62.8%
9.1%
1.4%

0.4%
0.8%
2.5%
27.5%
57.2%
10.1%
1.6%

0.3%
0.7%
2.1%
30.7%
56.2%
8.5%
1.4%

0.2%
0.9%
2.5%
31.1%
55.2%
8.5%
1.6%

Annual growth - absolute numbers

Year
TOTAL
Africa
Central / South America
North America
Europe
East Asia and Pacific
Central and South Asia
Middle East

2007

2008

2009

2010

2011

1935

1514

3689

2691

1883

4
20
33
368
1340
136
34

6
34
100
740
257
320
57

31
28
110
1391
1587
464
78

-1
17
7
1237
1394
25
12

-6
33
104
646
876
169
61

2011

Annual growth - in %
Year

2007

2008

2009

2010

TOTAL

33%

20%

40%

21%

12%

Africa
Central / South America
North America
Europe
East Asia and Pacific
Central and South Asia
Middle East

67%
111%
42%
35%
32%
36%
92%

60%
89%
89%
52%
5%
62%
80%

194%
39%
52%
64%
27%
55%
61%

-2%
17%
2%
35%
19%
2%
6%

-13%
28%
32%
13%
10%
13%
28%

ISO/IEC 27001 - Information technology - Security techniques - Information

security management systems - Requirements
Number of countries / economies
Year

2006

2007

2008

2009

2010

2011

TOTAL

64

70

82

118

118

100

Africa
Central / South America
North America
Europe
East Asia and Pacific
Central and South Asia
Middle East

2
6
3
30
14
3
6

2
5
3
34
14
4
8

4
9
3
36
15
5
10

22
15
3
40
16
9
13

21
18
3
39
17
9
11

9
15
3
41
15
6
11

Top 10 countries for ISO/IEC 27001 certificates - 2014

1
2
3
4
5
6
7
8
9
10

Japan
United Kingdom
India
China
Italy
Romania
Taipei, Chinese
Spain
United States of America
Germany

7181
2261
2170
2002
970
893
781
701
664
640

Top 10 countries for ISO/IEC 27001 growth - 2014

1
2
3
4
5
6
7
8
9
10

United Kingdom
China
India
Australia
United States of America
Ireland
Italy
Germany

338
292
239
101
98
77
69
59

Serbia
Vietnam

58
55

2012
19620
64
203
552
6379
10422
1668
332

2012
100%
0.3%
1.0%
2.8%
32.5%
53.1%
8.5%
1.7%

2012
2265
24
53
117
1090
757
171
53

2012
13%
60%
35%
27%
21%
8%
11%
19%

2012
103
11
16
3
42
15
5
11

ISO/IEC 27001 - Certificates worldwide - growth from end of 2006 to end of 2014
ISO/IEC 27001 - Africa
Year

ISO/IEC 27001 - Europe

2006

2007

2008

2009

2010

2011

2012

2013

2014

10

16

47

46

40

64

99

81

Country
Algeria
Angola
Botswana
Burundi
Congo, Republic of
Egypt
Ethiopia
Gabon
Ghana
Kenya
Lesotho
Malawi
Mauritius
Morocco
Mozambique
Niger
Nigeria
Rwanda
Sierra Leone
Somalia
South Africa
Sudan
Swaziland
Tanzania, United Republic of
Tunisia
Uganda
Zambia
Zimbabwe

1
1
7
1

1
1
8
1

1
2

3
1
1
1
2
2
1
1

1
1
1
1
3
1
1
2

1
1

1
1

14
2

14
2

1
2
1
1
1

10

1
2
1

17

11

1
3

4
5

1
11

8
7

11
9

12

9
5
1
16

14

22
1
1

35
1

1
22
1

3
5

ISO/IEC 27001 - Central / South America

Year
Country
Argentina
Barbados
Bolivia
Brazil
Chile
Colombia
Costa Rica
Cuba
Dominican Republic
Ecuador
El Salvador

Year
Country
Albania
Andorra
Armenia
Austria
Azerbaijan
Belarus
Belgium
Bosnia and Herzegovina
Bulgaria
Croatia
Cyprus
Czech Republic
Denmark
Estonia
Finland
France
Georgia
Germany
Gibraltar (UK)
Greece
Hungary
Iceland
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Moldova

2006

2007

1064

1432

16

23

8
5

27
3
1
5

77
4
1
14
9

95

135

3
54
10
6
175

5
81
11
7
148

2
2
1
1

Netherlands

41

41

Norway
Poland
Portugal
Romania
Russian Federation*
San Marino, Republic of
Serbia
Slovakia
Slovenia
Spain
Sweden
Switzerland

15
11
1
4
5

22
45
4
16
9

4
5
23
20
34

12
12
93
55
32

Montenegro

2006

2007

2008

2009

2010

2011

2012

2013

2014

18
1

38
1

72
6

203
33

272
40

277
23

25
3
8

40
7
11
2
1

117
8
1
1
41
13
23
6
2
1
1
1

150
24

10
2
3

100
4
1
1
48
10
14
5
1
1
1

3
50
18
27
7

1
53
23
58
7

1
86
25
80
22

2
1
1

3
3
1

1
82
24
82
10
0
4
5
1

3
7
1

ISO/IEC 27001 - Certificates worldwide - growth from end of 2006 to end of 2014
Guatemala

Guyana

1
1

Honduras

Peru

Puerto Rico
1

0
1

11
1

Ukraine
United Kingdom

10

27

486

519

*The figures include certificates accredited by national accredited bodies not members of the IAF.

12

ISO/IEC 27001 - Central and South Asia

ISO/IEC 27001 - North America

Year
Country

Republic of Macedonia
Turkey

Trinidad
Uruguay
Venezuela

2
0

Jamaica
Panama

Year
Country

2006

2007

383

519

369

508

Afghanistan
Bangladesh
India

2006

2007

2008

2009

2010

2011

2012

2013

2014

Kazakhstan

79
1
9
69

112
5
13
94

212
13
31
168

322
21
49
252

329
26
56
247

435
50
70
315

552
62
75
415

712
66
80
566

836
76
96
664

Kyrgyzstan
Nepal
Pakistan
Sri Lanka
Tajikistan

2006

2007

2008

2009

2010

2011

2012

2013

2014

ISO/IEC 27001 - Middle East

4210

5550

5807

7394

8788

9665

10422

10861

11303

Australia
Cambodia

59

55

63

55
1

82
1

94

113

138
0

239

Year
Country

China

75

146

236

459

957

1219

1490

1710

2002

29
2
159

36
5
256

59
2
702

72
7
934

78
9
1028

99
12
791

110
13
855

125
16
781

13

22

29

35

124
15
918
1
48

Canada
Mexico
USA

1
1
13

4
6

ISO/IEC 27001 - East Asia and Pacific

Year
Country

Hong Kong, China

Macau, China
Taipei, Chinese
Fiji
Indonesia

Bahrain

64

2006

2007

37
3

71
5

Iran, Islamic Republic of

Iraq
Israel
Jordan
Kuwait
Lebanon

4
1

24
1
6

2008

2009

2010

2011

2012

2013

2014

2172

3563

4800

5289

6379

7952

8710

8
1
3
88
2
1
47
9
330
96
9
276
14
3
32
161
0
640

1
32

37

54

59

3
28

7
75

1
19
4
60
22
3
264
9
1
18
15

1
26
4
116
24
4
529
6
1
23
31

1
29
2
132
32
5
301
5
1
27
46

1
31
7
208
58
9
264
7
2
28
66

357

424

488

20
135
13
10
233
1
3
2
1
1

253
1
28
146
16
21
297
2
7
2
1
2

44
151
20
24
374
6
11
5
2
2

45
178
21
30
425
9
14
8
2
1

49
199
20
48
495
9
19
7
5
1

1
47
9
278
69
16
399
8
2
32
94
1
581
0
77
280
26
54
901
18
23
5
7
3
1

56

76

97

125

190

316

337

16
75
4
44
17

17
187
5
303
53

25
229
17
350
72

28
16
203
18
58

3
50
27
483
30
57

8
70
33
711
30
61

31
233
20
575
31
1
9
111
31
642
37
66

16
279
34
866
27
1
25
127
13
805
32
65

26
307
58
840
48
1
43
159
49
799
49
111

71
310
56
893
50
1
101
162
58
701
47
133

15
23
10
88
4
1
13
14
239

62
297
31
131
970
24
26
7
7
7

33

86

117

100

132

181

224

12

738

946

1157

1464

1701

1923

2261

2008

2009

2010

2011

2012

2013

2014

839

1303
2
2

1328
1
1

1497
5
1

1668

2253

2002
0
9

813

1240

1281

1427

1611

1931

2170

2
1
28
23
1

1
1
18
21
1

19
42

16
27

0
17
37
0

28
33

2008

2009

2010

2011

2012

2013

2014

128
8

206
12

218
8

279
6

332
15

451
20

512
26

13

23

61
1
7

10
78
1
10
1

86
2
18
1

1
110
1
15
3

130
3
17
3

0
185
2
15
3

1
201
2
18
2

credited bodies not members of the IAF.

and South Asia

12
10

15

ISO/IEC 27001 - Certificates by industrial sector

The following table gives an idea of the number of certificates by industrial sector. Not all data sources responded to the request for
detail, so they should be taken as rough indicators. The sum of industrial sectors by country may excee
EA*
ISO/IEC 27001 BY INDUSTRIAL SECTOR

Code
Nos.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

2006

Agriculture, fishing
Mining and quarrying
Food products, beverages and tobacco
Textiles and textile products
Leather and leather products
Wood and wood products
Pulp, paper and paper products
Publishing companies
Printing companies
Manufacture of coke & refined petroleum products
Nuclear fuel
Chemicals, chemical products & fibres
Pharmaceuticals
Rubber and plastic products
Non-metallic mineral products
Concrete, cement, lime, plaster, etc.
Basic metal & fabricated metal products
Machinery and equipment
Electrical and optical equipment
Shipbuilding
Aerospace
Other transport equipment
Manufacturing not elsewhere classified
Recycling
Electricity supply
Gas supply
Water supply
Construction
Wholesale & retail trade; repairs of motor vehicles,
motorcycles & personal & household goods
Hotels and restaurants
Transport, storage and communication
Financial intermediation, real estate, rental
Information technology
Engineering Services
Other Services
Public administration
Education
Health and social work
Other social services
TOTAL

29
30
31
32
33
34
35
36
37
38
39

Information technology
Other Services
Construction
Transport, storage and communication
Electrical and optical equipment

Information technology
Other Services
Construction
Transport, storage and communication

5 Electrical and optical equipment

* EA = European Accreditation

2009

2010

2011

45
1
14
1
0
0
6
5
84
6
0
3
1
5
3
1
5
10
58
0
7
3
14
10
10
2
1
17

1
3
1
1
0
0
6
6
30
9
0
3
3
0
0
1
2
9
50
2
12
2
2
4
11
2
2
12

13
6
10
3
1
1
7
10
62
8
0
9
4
10
16
6
16
29
135
5
22
4
5
11
20
4
11
127

8
2
6
3
2
3
4
11
78
3
0
9
6
15
16
6
25
31
221
3
24
4
5
32
9
3
13
266

14
12
8
2
5
5
7
20
101
5
1
9
3
16
8
14
28
36
280
3
17
7
23
44
12
2
13
350

12
2
60
47
890
25
189
23
8
14
8
1475

38
4
70
54
1236
33
204
33
9
10
13
2016

26
0
63
68
1152
48
228
79
25
61
16
1940

93
6
170
148
2086
173
380
181
47
102
46
3987

164
10
184
185
3217
122
579
79
75
102
54
5579

214
32
241
113
3588
126
564
106
65
145
75
6314

4933
867
454
327
287

Top five industrial sectors for ISO/IEC 27001 certificates 2013

1
2
3
4

2008

1
0
3
0
0
0
2
1
34
3
0
7
0
7
1
1
10
18
38
0
0
1
4
2
8
0
1
55

Top five industrial sectors for ISO/IEC 27001 certificates 2014

1
2
3
4
5

2007

5059
849
396
322
289

d to the request for this additional

y may excee

2012

2013

2014

13
31
10
12
1
4
13
18
121
4
1
11
0
16
0
27
36
43
342
4
22
4
8
61
15
6
10
409

13
34
24
10
2
4
17
22
148
14
2
24
3
36
5
25
50
52
289
8
18
25
5
72
45
6
23
396

10
25
10
4
0
1
15
20
126
10
0
12
6
14
13
26
42
66
287
4
19
10
7
57
38
10
24
454

215
4
288
138
4558
189
755
155
102
201
98
7945

224
5
322
169
5059
211
849
192
101
201
106
8811

206
2
327
187
4933
217
867
191
83
215
102
8640

ISO/IEC 27001 - Number of sites covered by ISO/IEC 27001 certificates - single-site and multiple-site
certificates, plus unspecified sites, cumulated
The following table gives an idea of the number of sites covered by the certificate per country. It is provided as a rough indicator - not all data sources
responded to the request for such figures.

Country
TOTAL
Afghanistan
Albania
Algeria
Andorra
Argentina
Armenia
Australia
Austria
Azerbaijan
Bahrain
Bangladesh
Belarus
Belgium
Bolivia
Bosnia and Herzegovina
Bostswana
Brazil
Bulgaria
Canada
Chile
China
Hong Kong, China
Taipei, Chinese
Colombia
Costa Rica
Croatia
Cyprus
Czech Republic
Denmark
Dominican Republic
Ecuador
Egypt
El Salvador
Estonia
Finland
France
Georgia
Germany
Greece
Guatemala
Honduras

2007

2008

2009

2010

2011

1408

2173

4584

8608

167736

2012
3

2013

124020
2
1

Country

50
17

49
28

29
30

64
35

76
38

10

1
4
1
2

1
4
2
2

4
2
1
11
1
1

15
10
1
28
7

22
116
7
2
1012
49

13
101
12
6
1240
64

67
193
63
24
892
134

38
276
27
9
403
33

875
38
7
65
9
311
6
3
4
16
0
2
14
152

774
153
21
81
4
327

8
1

5
9

88
17

17
102
4
1
284
35

94
4

409
6

590
7

781
21

12
2
146
1
1
1
1

494
18
1
39
5
290
3
2
1
1
1
1
9
52
211
1

391
30

453
53
0
54
15
345
2
0
12
2
0
1
10
237
1
227
56

1
2

1
2

0
0

21

10

29
60
70
24

2014

171826 188043
1
5
8
2
2
2
23
2
104
5
148
132
54
86
1
14
29
1
14
1
29
33

1
2
5

24
4
276
2
2
1
2
1
1
9
2

57
12

19

81
21

101
1

1
1

9
1

9
1
91
249
77
36
641
116

12
4
1
1
5
712
265
44

TOTAL
Lebanon
Lithuania
Luxembourg
Macau, China
Malaysia
Malta
Mauritius
Mexico
Moldova
Montenegro
Morocco
Netherlands
New Zealand
Nigeria
Norway
Oman
Pakistan
Panama
Palestina
Peru
Philippines
Poland
Portugal
Puerto Rico
Qatar
Romania
Russian Federation*
San Marino, Republic of
Saudi Arabia
Serbia
Singapore
Slovakia
Slovenia
Somalia
South Africa
Spain
Sri Lanka
Sudan
Sweden
Switzerland
Thailand

2007

2008

2009

2010

2011

2012

1408

2173

4584

8608

167736

124020

3
2

1
2

35

1
33
7

34

38

1
16

14

62
1
2
18

77
2
2
30

10
2

10
1

11
18

8
1
9

17
3
11

16
2
7

24
2
7

12
5

1
22
38

7
28
93

12
14
102
16

6
39
155
17

16
1

44
4

270
26

1
191
44

4
5
6

6
17
9

8
1
22
27
9

10
2
51
53
12

4
442
10
2
19
7
30
90
29

21

2
147

4
369
1
1
40

7
738
4
1
72

6
684
7
115

22
958
32
1
125

8
17

9
24

10
32

27
54

6
2
1

2
58
7
13
117
6
8
97
1
16
181
5
9
24
11
14
2
1
9
83
282
34
2
4
650
28
2
53
22
61
103
13

ISO/IEC 27001 - Withdrawn certificates

The following table gives an idea of withdrawn certificates per country. It is provided as a rough indicator - not all data sources responded to the request for such figures.

Country
TOTAL
Australia
Austria
Belgium
Bermuda
Brazil
Bulgaria
Canada
Chile
China
Hong Kong, China
Taipei, Chinese
Colombia
Croatia
Czech Republic
Ecuador
Finland
France
Germany
Ghana
Greece
Hungary
India
Indonesia
Iran, Islamic Republic of

2006

2007

31

112

2008

2009

2010

70

824

357

1
3

1
4

5
2
3
1
23

3
7
39
10
304
3
7
7
1
4

1
1

3
7

89
16
4

2011

Country

1798
37
2

59
16
1
9

1
23

294
2
243

14
1
1
2
1

8
5
33
1
27

TOTAL
Malaysia
Mexico
Netherlands
Oman
Pakistan
Philippines
Poland
Romania
Russian Federation*
Serbia
Singapore
Slovakia
Slovenia
South Africa
Spain
Sweden
Switzerland
Thailand
The former Yugoslav
Republic of Macedonia
Turkey
Ukraine
United Arab Emirates
United Kingdom
USA

2006

2007

31

112

2008
1
1

70

2009
1
1
1

2
1

2010
1
1
2
1
9
5
8
7
1
5
6

357

2011
3
3
7

1
6
16

1
2
12

1798

2
2
5

21
2
16
14
1
76
5
1
1
74

34
1
8

33
1
7

5
16

256
2

17

96

3
1

11

824

10

1
1

I
SO /
I
EC

27001

Wo rl
dw
i de

t
ot
a l

3 0
0 0
0

2 5
0 0
0

5
1
2
4
5
1

2
2
5
3

2
0
0
2
2 0
0 0
0

3
3
2
1
6
6
8

2
1
8
1
3
2
8

1 5
0 0
0

5 0
0 0

3
8
3

7
3
9
4
5
8
0
7

5
5
5
0
4
2
1
0
3
5
6
3

1
0
4
2
2
9
6
6
5
8
7
8
8

1
2
8
8
3
9
7
1
5
1
9

1
0
6
4
2
0 0 6

1
4
3
2
1
1
2
2
0 0 7

2
1
7
2
2
1
2
2
0 0 8

3
2
2
2 0
0 9

4
8
0
0
3
2
9
2 0
1 0

5
2
8
9

4
3
5
2
0 1 1

i d d l e

Ce n t
r

7
9
5
2

8
7
1
0

7
1
2

8
3
6

6
3
7
9

5
5
2
2 0
1 2

2 0
1 3

2 0
1 4

a l

E a s

o p e

N
o r

t
h

Afr

1
1
3
0
3
1
0
8
6
1

2
0
6
1
3
0
3
1 0
0 0
0

E u r

As

Ce n t
r

2
7
9
1
4
9
7

i c
a

E a

i a

Am

a l

s
t

n d

So u t
h

a n d

e r
i c

So u

P a c

As

i a

i fi c

t
h

Am e r

i c

I
SO
/I
E
C

27001

R
e
gi o
na l

sha
re

1 0 0 %
7
%

7
%

7
3
%

7
2
%

9
%

0
%

7
%

8
%

9
%

9
%

9
%

9
%

4
9
%

4
7
%

3
6
%

3
6
%

9 0 %

8 0 %

i d d l e

Ce

7 0 %

6 0 %

6
3
%

5
6
%

5
5

5
3
%

5 0 %

4 0 %

3 0 %

2 0 %
2
3
%
1 0 %

0 %

1
8
%

1
%
0
%
2 0 0 6

8
%

3
1
%

3
1

3
3
%

1
9
%

1
%
0
%
2 0 0 7

2
%
1
%
2 0 0 8

2
%
1
%
2 0
0 9

2
%
1
%
2
0 1 0

2
%
1
%
2 0 1 1

3
%
1
%
2 0 1 2

3
%
1
%
2 0 1 3

3
%
1
%
2 0 1 4

n t
r
a
A

E a s
l

a n d

E a

s
t

E u

r
o p

r
t
h

Am e r

N
o
Ce

n t
r
a

Afr

i c

s
i a

So

n d

u t
h

P a c

As

i a

i fi c

i c
a

o u t
h

Am

e r
i c

I
SO /
I
EC

27001

Wo r
l d

a
nnua l

gro w
t h

(
i n

%
)

4 5 %
4
0
%

4 0 %

3 5 %

3
3
%

3 0 %

2 5 %
2

2 0 %

2
1
%

0
%

1 5 %
1
2
%

1
3
%

4
%

1 0 %
7
%
5 %

0 %
2
0 0
7

2
0 0 8

2 0
0 9

2 0
1 0

2
0 1
1

2
0 1
2

2 0
1 3

2 0
1 4

I
SO
/I
E
C

27
00

N
um
be r

o
f

c
o unt
ri
e s

e c
o no
m i
e
s

1
4
0

1
2
0
1
1

1
6

1
7

1
1

8 0

1
0
8

6 0

6
3
1
4

6
1
5

1
1

1
1

1
6
5

1
5

4
0

1
6

4
4

3
9

1
4

4
1
3

4
6

3
6
3
0

1
5

3
4

1
8
3

2 0
3
3
6
2
2 0
0 6

3
5
2
2 0
0 7

1
5
2
2

9
2 0
0 9

3
3
1
4

1
5

2
1

4
2 0
0 8

3
1

2
0 1 0

2
0 1
1

2
0 1
2

1
0
2
0 1
3

1
3
2 0
1 4

a l

E a s

E u r

o p e

N
o r

t
h

As

Ce n t
r
Afr

4 0

i d d l e

Ce n t
r

1
3
1
0
0

i c
a

E a

s
t

a n
i a

So u t
h

a n d

Am e
a l

r
i c

P a c
i

As
i

fi c

So u t

Am e r

i c