Certificate of Approval
This is to certify that the Management System of:
Vodafone Group Services Limited
The Connection, Newbury, RG14 2FN, United Kingdom
has been approved by LRQA to the following standards:
ISO/IEC 27001:2013
David Derrick
Issued By: Lloyd's Register Quality Assurance Ltd
This certificate is valid only in association with the certificate schedule bearing the same number on which
the locations applicable to this approval are listed.
Current Issue Date: 29 October 2018 Original Approvals:
Expiry Date: 31 December 2020 ISO/IEC 27001 – 13 March 2001
Certificate Identity Number: 10149664
Approval Number(s): ISO/IEC 27001 – 0044028
The scope of this approval is applicable to:
Information Security Management System of Vodafone Group functions covering: The Provision, Maintenance and Operations for Cyber Defence, Data Centres, Infrastructure, Application and Network services for Local Markets and Group Enterprise; Office IT services, Shared Service Centres and relevant Business Processes. Enterprise services include: Internet of Things, Unified Communications,
International Network Connectivity, IP-VPN and Cloud & Hosting Services.
This is in accordance with Statement of Applicability version 18.n
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 1 of 7
Certificate Schedule Certificate Identity Number: 10149664
Location Activities
Vodafone Group Services Limited ISO/IEC 27001:2013
The Connection, Newbury, Information Security Management System of
RG14 2FN, United Kingdom Vodafone Group functions covering: The Provision, Maintenance and Operations for Cyber Defence, Data Centres, Infrastructure, Application and Network services for Local Markets and Group Enterprise; Office IT services, Shared Service Centres and relevant Business Processes. Enterprise services include: Internet of Things, Unified Communications, International Network Connectivity, IP-VPN and Cloud & Hosting Services. This is in accordance with Statement of Applicability version 18.n
Vodafone Group Services GmbH ISO/IEC 27001:2013
Ferdinand-Braun-Platz 1, 40549 Düsseldorf, Information Security Management System of
Germany Vodafone Group functions covering: The Provision, Maintenance and Operations for Cyber Defence, Data Centres, Infrastructure, Application and Network services for Local Markets and Group Enterprise; Office IT services, Shared Service Centres and relevant Business Processes. Enterprise services include: Internet of Things, Unified Communications, International Network Connectivity, IP-VPN and Cloud & Hosting Services. This is in accordance with Statement of Applicability version 18.n
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 2 of 7
Certificate Schedule Certificate Identity Number: 10149664
Location Activities
Vodafone Group Services GmbH ISO/IEC 27001:2013
Rehhecke 50, D-40885 Ratingen, Germany Data Centre, Infrastructure, Application and Network services for Local Markets and Group
Enterprise.
Vodafone Cloud & Hosting Services (VCHS) ISO/IEC 27001:2013
Eschborner Landstraße 100, 60489 Frankfurt, Operation of Vodafone Cloud & Hosting services
Germany located in Frankfurt a. M. and Ruesselsheim a.
M. data centre in Germany.
Vodafone International ISO/IEC 27001:2013 Horizon Building, 65/3G Central Spine, Shared Service Centre performing activities for
6th of October City, PO BOX 12573, Group Functions, Local Markets and Vodafone
Cairo, Egypt Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Vodafone International ISO/IEC 27001:2013 Smart Village Offices 2,3, Vodafone Building, Shared Service Centre performing activities for
Desert Road KM 28, Cairo, Egypt Group Functions, Local Markets and Vodafone
Global Enterprise. Including the security of Office
IT Services, System Operations, office location
and related shared services centre activities.
Vodafone International Services L.L.C. ISO/IEC 27001:2013
MCCP 48. nasr ST. New Maadi, PO Box 12573, Shared Service Centre performing activities for
Cairo, Egypt Group Functions, Local Markets and Vodafone
Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 3 of 7
Certificate Schedule Certificate Identity Number: 10149664
Location Activities
Vodafone Madrid Data Centre/SPE ISO/IEC 27001:2013 Vodafone d/ Palier, 48-50-Polfgono, Industrial Data Centre, Infrastructure, Application and
Cuidad del Automóvil E -Leganés, Spain Network Operations of Internet of Things and
Unified Communications.
Vodafone Group Services Limited ISO/IEC 27001:2013 Melbourne Street, Leeds, LS2 7PS, United Operation of Vodafone Private Cloud services.
Kingdom
Vodafone Group Services Limited ISO/IEC 27001:2013 Plaza 4, Riverbank Way, Great West Road, Cyber Defence Operations for Group Functions,
Local Markets and Group Enterprise.
Brentford, TW8 9RE, United Kingdom
Vodafone Group Services Limited ISO/IEC 27001:2013 Andrew House, Newbury Business Park, 3200, Data Centre, Infrastructure, Application and London Road, Newbury, Hampshire, RG14 2PQ, Network services for Local Markets and Group
Enterprise. United Kingdom
Vodafone Group Services Limited ISO/IEC 27001:2013
Unit 2, Gemini, Hamilton Close, Basingstoke, Data Centre, Infrastructure, Application and
RG21 6YT, United Kingdom Network services for Local Markets and Group
Enterprise.
Vodafone Group Services Limited ISO/IEC 27001:2013
Gotts Road, Leeds, LS12 1AD, United Kingdom Data Centre, Infrastructure, Application and Network services for Local Markets and Group Enterprise. Operation of Vodafone Private Cloud
services.
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 4 of 7
Certificate Schedule Certificate Identity Number: 10149664
Location Activities
Vodafone Group Services Limited ISO/IEC 27001:2013 Windmill Hill Business Park, Whitehill Way, Data Centre, Infrastructure, Application and
Swindon, SNS 6LA, United Kingdom Network services for Local Markets and Group Enterprise. Operation of Vodafone Private Cloud
services.
Vodafone Group Services Limited ISO/IEC 27001:2013
Waterside House, Waterside Park, Longshot Lane, Network services for the Local Markets and Group
Bracknell, RG12 1XL, United Kingdom
Enterprise; International Network Connectivity.
Vodafone Group Services Limited ISO/IEC 27001:2013
Stockley Road, West Drayton, Uxbridge, UB7 9FN, Operation of Vodafone Private Cloud services.
United Kingdom
Vodafone Shared Services Budapest Zrt. (VSSB) ISO/IEC 27001:2013
Area Corner/ Kerepesi Tower, Hungária Körút 40- Shared Service Centre performing activities for
44, H-1 087 Budapest, Hungary Group Functions, Local Markets and Vodafone
Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Vodafone Group Services Ireland Ltd. ISO/IEC 27001:2013
Clonshaugh Technology and Business Park, Data Centre, Infrastructure, Application and
Dublin 17 IRL-Coolock, Ireland Network services for Local Markets and Group
Enterprise.
Vodafone India Service Private Ltd. (VISPL) ISO/IEC 27001:2013 EON Free Zone, IT & ITES/ Special Economic Shared Service Centre performing activities for Zone, MIDC Kharadi, Pune, Maharashtra, 411014, Group Functions, Local Markets and Vodafone
India Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 5 of 7
Certificate Schedule Certificate Identity Number: 10149664
Location Activities
Vodafone India Service Private Ltd. (VISPL) ISO/IEC 27001:2013
Mantri, Nagar Road, Lohegaon, Pune 411014, India Shared Service Centre performing activities for Group Functions, Local Markets and Vodafone
Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Vodafone India Services Private Ltd. (VISPL) ISO/IEC 27001:2013 Vodafone House, Ground Floor, Corporate Road, Shared Service Centre performing activities for Prahlladnagar, Off SG Highway, Prahllad, Nagar, Group Functions, Local Markets and Vodafone
Ahmedabad, 380051, Gujarat, India Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Vodafone Global Services Pvt. Ltd. ISO/IEC 27001:2013 Prestige Tech Park, Sarjapur, Marathahalli, Outer Shared Service Centre performing activities for
Ring Road, Bangalore, 560103, India Group Functions, Local Markets and Vodafone
Global Enterprise. Including the security of Office
IT Services, System Operations, office location
and related shared services centre activities.
Vodafone Global Services Pvt. Ltd. ISO/IEC 27001:2013 BDC-1, Global Technology Park, Maple Tree, Shared Service Centre performing activities for Marathahalli Outer Ring Road, Devarabeesanahalli Group Functions, Local Markets and Vodafone Village, Varthur Hobli, Bangalore, 560 103 Global Enterprise. Including the security of Office India IT Services, System Operations, office location
and related shared services centre activities.
Vodafone Servizi e Tecnologie srl. ISO/IEC 27001:2013
Via Bisceglie 1-73, 1-20100 Milano, Italy Data Centre, Infrastructure, Application and Network services for Local Markets and Group
Enterprise.
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 6 of 7
Certificate Schedule Certificate Identity Number: 10149664
Location Activities
Vodafone Servizi e Tecnologie srl. ISO/IEC 27001:2013
Castelletto DC, Via Monzoro, 101/3/5, Data Centre, Infrastructure, Application and
20010 Cornaredo-Milan, Italy Network services for Local Markets and Group
Enterprise.
Vodafone Servizi e Tecnologie srl. ISO/IEC 27001:2013
Via Kuliscioff 34, 20152 Milano, Italy Data Centre, Infrastructure, Application and Network services for Local Markets and Group
Enterprise.
Vodafone Servizi e Tecnologie srl. ISO/IEC 27001:2013
Via Bensi 2-5, 1-20100 Milano, Italy Data Centre, Infrastructure, Application and Network services for Local Markets and Group
Enterprise.
Vodafone Shared Service SRL ISO/IEC 27001:2013 City Office, Oltenitei Street #2, District 4, Shared Service Centre performing activities for
Bucharest, Romania Group Functions, Local Markets and Vodafone Global Enterprise. Including the security of Office
IT Services, System Operations, office location
and related shared services centre activities.
Vodafone Shared Service SRL ISO/IEC 27001:2013
Avrig Strada 3-5, District 2 Bucharest, Shared Service Centre performing activities for
Romania Group Functions, Local Markets and Vodafone Global Enterprise. Including the security of Office IT Services, System Operations, office location
and related shared services centre activities.
Lloyd's Register Group Limited, its affiliates and subsidiaries, including Lloyd's Register Quality Assurance Limited (LRQA), and their respective officers, employees or agents are, individually and collectively, referred to in this clause as 'Lloyd's Register'. Lloyd's Register assumes no responsibility and shall not be liable to any person for any loss, damage or expense caused by reliance on the information or advice in this document or howsoever provided, unless that person has signed a contract with the relevant Lloyd's Register entity for the provision of this information or advice and in that case any responsibility or liability is exclusively on the terms and conditions set out in that contract. Issued By: Lloyd's Register Quality Assurance Ltd, 1 Trinity Park, Bickenhill Lane, Birmingham B37 7ES, United Kingdom
Page 7 of 7