Certifications and accreditations
Company
Anyone can put a vendor logo on a website. Below are our vendor partner tiers and where we stand on each security framework, so you can check them properly.
Tiers, not logos.
Vendor partner tiers
A tier decides how far a provider can escalate inside the vendor and what pricing it can reach. It is the part that affects you, and the part a logo does not tell you.
| Vendor | What it covers | Partner tier |
|---|---|---|
| Microsoft | Microsoft 365, Azure, licensing | Solutions Partner: Modern Work, Security |
| VMware | Virtualisation, the vDC platform | VMware Partner |
| Veeam | Backup, replication, restore testing | VCSP Platinum |
| Fortinet | Perimeter security, SD-WAN | Select |
| Cisco Meraki | Networking, wireless, multi-site | Cisco Partner |
Partner status as THUSA reports it. Ask us for any vendor's written confirmation.
Where we stand on each framework.
Frameworks and regulation
Providers routinely blur these words. Aligned means our controls are built to the framework. Referenced means we work to it as a guide. Neither is a certificate, and we do not call either one a certification.
| Framework | Our position | What that means |
|---|---|---|
| ISO/IEC 27001 | Aligned. Not certified. | Our controls are built to the standard. No accredited body has audited us against it, so we hold no certificate. |
| POPIA | Obliged | South African law. An Information Officer is registered and processing agreements are in place. Information Officer: Carl Petzer. |
| NIST Cybersecurity Framework | Referenced | Security work maps to Identify, Protect, Detect, Respond and Recover. It is a framework, not a certification. |
| CIS Controls | Referenced | Baseline hardening and configuration standards follow CIS. It is a framework, not a certification. |
| B-BBEE | Level 2 | A verified scorecard. Relevant to your own procurement points. |
Four questions that separate a real credential from a logo on a website.
What to ask any provider
-
Which tier, with which vendor, and since when?
The tier decides the escalation path and the pricing a provider can reach. Ask for it in writing, per vendor, and check it against the vendor's own partner directory.
-
How many currently certified engineers?
Certifications sit with individuals, not companies. Ask how many people currently hold the certification covering the platform you depend on, and what happens if they resign.
-
Aligned, working towards, or certified?
Only one of those three comes with an auditor and a certificate number. Ask which word applies, and ask to see the number.
-
What is the limit, and when does it expire?
Professional indemnity and cyber liability only matter at the moment something goes wrong. Ask for the certificate, the limit, and the renewal date.
Ask us the same four. We will send the certificates rather than a list of names.
Request the certificate pack.
One PDF: partner confirmations, engineer certifications, framework control mapping, insurance schedules and the B-BBEE certificate.
Stop managing IT.
Start relying on it.
Ready when you are
THUSA cuts IT downtime and lifts efficiency. Tell us about your business. Talk to a managed IT services provider that takes ownership.