The Energy Regulatory Commission (ERC), through its Planning and Public Information Service (PPIS) – Management Information Systems Division (MISD) and Information and Data Management Division (IDMD), has successfully maintained its ISO/IEC 27001:2022 Information Security Management System (ISMS) Certification, reaffirming the Commission’s steadfast commitment to protecting information assets and continuously enhancing its information security practices.
The certification covers the ERC’s functions as an independent electric power industry regulator and encompasses its Main Office, Visayas Area Operations Division, and Mindanao Area Operations Division.
The successful maintenance of the certification is a testament to the collective efforts of the entire Commission in upholding the highest standards of information security, risk management, and data protection. It reflects the ERC’s dedication to ensuring that information entrusted to the Commission is handled with integrity, confidentiality, and accountability.
The ERC recognizes all officials and personnel for their continued commitment to upholding the Commission’s information security policies and practices. The Commission likewise recognizes the PPIS-MISD and IDMD, together with all concerned services and personnel, for their hard work and dedication in gathering, organizing, and consolidating the extensive documentation and evidence necessary to demonstrate compliance during the audit process.
ERC Chairperson and CEO Atty. Francis Saturnino Juan lauded the efforts of the teams and underscored the importance of information security in today’s increasingly digital environment.
“For the ERC, information security is not merely a technical requirement—it is an essential pillar of public trust.”
“Maintaining our ISO/IEC 27001 certification signifies our unwavering commitment to good governance and service excellence. For the ERC, information security is not merely a technical requirement—it is an essential pillar of public trust,” Juan explained.
“By adhering to internationally recognized standards, we ensure that the information entrusted to us by consumers, regulated entities, and stakeholders remains secure, reliable, and protected. This achievement strengthens our capability to deliver transparent, efficient, and resilient regulatory services that ultimately benefit the Filipino people,” the ERC chief stressed.
“By maintaining our ISMS certification, the ERC further enhances the ability to protect sensitive consumer and industry information, strengthen cybersecurity measures, ensure business continuity, and improve the reliability of our digital services.”
“By maintaining our ISMS certification, the ERC further enhances the ability to protect sensitive consumer and industry information, strengthen cybersecurity measures, ensure business continuity, and improve the reliability of our digital services,” he stressed.
For electricity consumers and stakeholders, this translates to greater confidence that the Commission’s systems and processes are secure, enabling more efficient transactions, better protection of personal and operational data, and a more trustworthy and responsive regulatory environment.
The ERC remains committed to continuously improving its information security framework and upholding accountability and vigilance in its operations, ensuring that the Commission remains a secure, resilient, and trusted regulator in the Philippine energy sector.
