Cityline榮獲ISO/IEC 27001認證採用國際認可信息安全管理框架 | Cityline Achieves ISO/IEC 27001 CertificationAdopting an Internationally Recognised Information Security Management Framework

Cityline作為香港票務、支付及科技服務合作夥伴，扎根市場超過 30 年，整合文化、票務、支付與技術夥伴資源，提供穩定可靠服務，同時以系統化資訊安全管理保障資料安全。今年獲得ISO/IEC 27001信息安全管理體系認證，充分彰顯 Cityline 致力保障信息資產安全，並持續提升網絡安全管治及信息安全管理能力的承諾。SGS團隊於9月上旬與Cityline管理層會面交流，即場頒發國際認證。

是次信息安全管理體系(ISMS)認證涵蓋 Cityline 及其 RECON 支付服務的軟件應用程式開發、系統維護、合作夥伴開發支援及營運管理等範疇，透過全球領先的測試、檢驗和認證公司SGS的審核，促使Cityline內部檢視現行流程是否一致且合乎規格 ，增強文件化管理與關鍵控制措施，同時提升跨部門協作與責任分工。透過差距分析，擬定後續改善方向與行動計劃。獲取ISO/IEC 27001認證，有助Cityline建立標準化、可追蹤的信息安全管理體系；以風險為本管理信息安全，提升資源配置效率；強化審計、內部監控與持續改善機制，以及提升符合法規能力與對外信任度。

依循國際認證 統一系統規格

「Cityline系統及流程抱持與時並進及革新的態度，以滿足客戶的需要。團隊每日都觀察數據及用戶意見，收集相關資訊作研究，並適時更新系統及流程。今次獲得ISO /IEC 27001國際認證的專業認可，是對同事努力的肯定，Cityline致力將系統標準化，特別是保安層面，均按照國際認證標準來運作。」Cityline執行董事兼總經理林永存強調系統規格統一的重要性。

除了普羅大眾在購買門票時接觸到的Cityline購票平台外，旗下自行研發的網上付款系統RECON同樣獲得ISO/IEC 27001認證。RECON網上付款系統讓顧客購買門票時可直接轉至付款平台，選擇他們需要的多元化付款方式進行交易。此系統亦用於B2B範疇，多間本地大型連鎖零售商店及著名企業亦採用該系統處理各自平台的付款流程。

As a ticketing, payment, and technology service partner rooted in Hong Kong for over 30 years, Cityline integrates cultural, ticketing, payment, and technology partner resources to deliver stable and reliable services, while safeguarding data security through systematic information security management. Achieving the ISO/IEC 27001 Information Security Management System (ISMS) certification this year fully demonstrates Cityline's commitment to safeguarding information assets and continually enhancing cybersecurity governance and information security management capabilities. In early September, the SGS team met with Cityline management to exchange insights and presented the international certificate on-site.

The scope of this Information Security Management System (ISMS) certification covers the software application development, system maintenance, partner development support, and operations management for Cityline and its RECON payment services. Through the audit conducted by SGS, the world's leading testing, inspection, and certification company, Cityline was prompted to review the consistency and compliance of existing internal processes, reinforcing documented management and key control measures while enhancing cross-departmental collaboration and accountability. Gap analysis further facilitated the formulation of follow-up improvement directions and action plans. Achieving ISO/IEC 27001 certification helps Cityline establish a standardised, traceable information security management system; manage information security with a risk-based approach to enhance resource allocation efficiency; strengthen auditing, internal control, and continuous improvement mechanisms; and elevate regulatory compliance capabilities alongside external trust.

Adhering to International Certification and Unifying System Specifications

"Cityline maintains an attitude of keeping pace with the times and embracing innovation across our systems and processes to meet client needs. Our team monitors data and user feedback daily, gathering pertinent information for analysis, and updates systems and workflows in a timely manner. The professional recognition of achieving the ISO/IEC 27001 international certification is an affirmation of our colleagues' dedication. Cityline is committed to standardising our systems—particularly on the security front—in full accordance with international certification standards," emphasised Mr Marcus Lam, Executive Director and General Manager of Cityline, highlighting the importance of unified system specifications.

Beyond the Cityline ticketing platform widely used by the public for ticket purchases, RECON, its proprietary online payment system, has likewise achieved ISO/IEC 27001 certification. The RECON online payment system enables customers to be seamlessly directed to the payment platform when purchasing tickets, allowing them to choose from a diverse range of payment methods to complete transactions. This system is also extensively utilised in the B2B sector, trusted by numerous major local retail chains and renowned enterprises to process payments across their respective platforms.

SGS新產品和服務開發副總監游天鴻(左)頒發ISO/IEC 27001信息安全管理體系認證予Cityline執行董事兼總經理林永存(右)。

Mr Yau Tien Hong Chris, Deputy Director, Products and Services Development at SGS (left), presents the ISO/IEC 27001 Information Security Management System certification to Mr Marcus Lam, Executive Director and General Manager of Cityline (right).

Cityline執行董事兼總經理林永存(前右一)指，獲得ISO /IEC 27001國際認證，是對Cityline同事努力的肯定，並致力將系統按照國際標準來運作。圖中亦包括主席蘇偉基(前右二)及董事潘曼婷(前右三)。

Mr Marcus Lam, Executive Director and General Manager of Cityline (front row, first from right), notes that achieving the ISO/IEC 27001 international certification is an affirmation of the Cityline team's dedication and underscores the company's commitment to operating systems in accordance with international standards. Also pictured are Chairman Mr Godwin So (front row, second from right) and Director Ms Jenny Poon (front row, third from right).

SGS團隊與Cityline管理層會面交流，分享信息安全管理上的經驗及發展。

The SGS team meets with Cityline management to exchange insights and discuss developments in information security management.