Auckland, New Zealand, 5 October 2026. FUJIFILM CodeBlue, a subsidiary of FUJIFILM Business Innovation New Zealand, has achieved ISO/IEC 27001:2022 certification, independently validating the information security practices behind its managed IT and cybersecurity services.
The certification applies to the Information Security Management System (ISMS) supporting CodeBlue’s managed IT, cyber security, backup, hosting and professional IT services. Following an independent assessment completed in July 2026, it confirms that the system is established, operational and aligned with the ISO 27001 standard.
The milestone comes as new research from the National Cyber Security Centre finds that 43% of New Zealand SMEs now consider themselves vulnerable to a cyber attack, up from 34% in 2025. The pressure is particularly acute in data-sensitive sectors such as healthcare, financial services and legal services, where organisations must protect confidential information and demonstrate that effective cyber controls are embedded across governance, supplier oversight, risk management and day-to-day operations.
Independent assurance for customers
David Jupe, Managing Director of FUJIFILM Business Innovation New Zealand, said the certification demonstrates that CodeBlue applies the rigorous security practices it recommends to customers.
“Customers, regulators, insurers and boards want more than a list of security controls. They want evidence those controls are governed, monitored and effective,” says Jupe.
“ISO 27001 certification gives customers greater confidence that the systems, processes and governance supporting our managed services have been independently verified.”
The independent assessment examined governance, supplier management, incident response, business continuity, access controls and performance monitoring.
Helping customers strengthen cyber governance
The same governance discipline behind CodeBlue’s certification also informs how it helps customers manage cyber risk. Many organisations understand the importance of cyber security but struggle to show that controls are working, responsibilities are clear and risks are being actively managed.
Through its RiskAware service, virtual CISO engagements and cyber governance advisory services, CodeBlue helps organisations assess their current security position, identify priority gaps and create practical improvement plans. This gives executives and boards clearer information for making decisions about cyber risk.
“Cyber security is not just about technology. Organisations need a clear understanding of their risks, defined accountability and a practical plan for continual improvement,” says Mathew Jose, CodeBlue’s Chief Information Security Officer.
“Having completed our own independent certification process, we can bring practical experience to customers that need to strengthen governance, demonstrate that controls are operating effectively and give executives and boards greater confidence in how cyber risk is being managed.”
This press release was first published on ResellerNews.