This international accreditation is proof of FPT IS's commitment to its customers to deliver quality information security services that meet global standards.

In February 2023, FPT IS's Pentest passed strict evaluation to make it one of the few companies operating in Vietnam qualified to be an official member of CREST. FPT IS is also currently the only technology company in Vietnam to hold CREST accreditation for Pentest services and PCI.QSA for consulting and assessment, as well as PCI.DSS certification services.

FPT IS's Pentest service is assessed by CREST to meet international standards in terms of expert capacity, professional experience, technological capabilities, policies, processes, procedures and professional ethics. Becoming a member of CREST is an important step for FPT IS in the process of standardising its Pentest services according to international standards, meeting the needs and tackling problems facing customers regarding security issues in Vietnam as well as around the globe. This is also a milestone for FPT IS in its globalisation strategy.

In 2023, the Ministry of Information and Communications issued both warnings and guidelines regarding 12,846 cyberattacks, an increase of 5.3 per cent compared to 2022. The targets that suffered the most were government agencies, banking systems, financial institutions, industrial systems and other key areas. In this context, Pentest services have become vital for organisations and businesses to detect security vulnerabilities and test system penetration.

The penetration testing market size is estimated to reach $12.76 billion by 2029, growing at a compound annual growth rate (CAGR) of 24.59 per cent from 2024-2029 (Mordor report). The rapid development of the market has led to the appearance of a series of individuals and organisations providing network security services, creating challenges for customers looking for a qualified information security provider with professional capacity and reliability. Becoming a member of the CREST organisation helps FPT IS to prove its reputation and capacity in the field of information security testing. At the same time, it opens up many opportunities to connect with more than 300 potential partners and customers in the CREST community.

CREST is a non-profit organisation established in 2006, representing the IT security industry. CREST provides internationally recognized accreditation for organisations providing information security services and professional certifications for individuals providing security vulnerability assessment, penetration testing, and response services, cyber incidents, cybersecurity threat intelligence, and security operations centre (SOC).

With a strict quality testing process, CREST has been setting a new gold standard, becoming one of the most prestigious accreditation that businesses and organisations can achieve. CREST members are reviewed annually and every 3 years a comprehensive appraisal of accredited businesses will be conducted.

To be recognized as a member of CREST, businesses need to meet many strict criteria. In particular, FPT IS fully meets the requirements by possessing a series of world-class IT certificates (ISO9001, ISO27001...).

Regarding criteria for the capability of the Pentest Service, FPT IS achieved an almost perfect score when proving success in many large projects through its team of top technology experts.

CREST also evaluates service implementation by asking for customer references. FPT IS received good reviews from international and dosmetic customers,, helping to strengthen the position and capabilities of the business.

“We are pleased to welcome FPT IS as a CREST accredited member company in the Asia region,” said Rowland Johnson, president of CREST. “To gain accreditation for its penetration testing services, FPT IS has been through a demanding assessment process that examined test methodologies, legal and regulatory requirements, data protection standards, logging and auditing, internal and external communications with stakeholders, as well as how test data security is maintained. FPT IS joins a growing number of companies in Vietnam with our internationally recognised accreditation that provides buyers with valuable, independent evaluations of leading organisations and businesses,” he added.

“We are currently the only technology unit in Vietnam to own CREST accreditation for Pentest and QSA services. This demonstrates FPT IS's pioneering leadership in information security, while affirming its commitment to customers. Being recognised by CREST will push FPT IS to strengthen its position in the domestic market and expand cooperation opportunities with international partners and customers, especially in industries that require high security, safety and data compliance such as finance, banking and e-commerce. We will continue to develop FPT IS products and services that meet international standards, conquering the global market," Nguyen Hoang Minh, CEO of FPT IS, shared.

Before being confirmed as a member of CREST, FPT IS was a member of the Payment Card Industry Security Standard Council (PCI SSC) and was allowed to provide consulting and assessment services. FPT IS assesses the Global Managed Services Park with an aim to provide services for 100 international customers, host more than 1,000 employees, and reach a revenue of $30 million by 2026.