Queen Sirikit Becomes ASEAN’s First Convention Centre to Receive ISO 27001 Certification

The Queen Sirikit National Convention Center (QSNCC) in Bangkok has become the first convention centre in ASEAN to receive ISO/IEC 27001:2022 certification, strengthening its information security systems ahead of a major period for international events, including the 2026 IMF-World Bank Group Annual Meetings in October.

The certification applies to QSNCC’s Information Security Management System (ISMS) and covers key elements of the venue’s technology infrastructure, including its Data Center and core IT systems, identity and access management, and wired and wireless internet services provided to customers.

The assessment was carried out by BSI Group (Thailand) Co., Ltd. ISO/IEC 27001:2022 is the international standard for information security management and provides a structured framework for protecting information through risk management, control measures and continuous improvement. Its three core principles are confidentiality, integrity and availability of systems and services.

For a convention centre, those requirements increasingly extend into the operational infrastructure underpinning an event. Connectivity, access systems and the availability of digital services can affect how organisers, delegates and suppliers interact with a venue throughout an event, making information security part of the wider event delivery environment.

Surapol Utintu, CEO of Queen Sirikit National Convention Center, said the certification provides confirmation that the venue's underlying systems have been developed according to international standards.

“As ASEAN’s first convention center to receive ISO/IEC 27001:2022 certification, this is another important confirmation of the readiness of our back-end systems, which have been developed in line with international standards. Technology and digital systems have become an increasingly important part of event operations. This is particularly true for international conferences that rely on IT systems and network connectivity throughout the event. Information security is therefore not simply about preventing data breaches. It also means maintaining data integrity and ensuring that systems and services remain continuously available.”

At QSNCC, the certification encompasses the systems and services supporting its core IT environment, with the centre placing particular emphasis on the confidentiality and integrity of information and the continuous availability of its services.

The venue will put those capabilities to a significant test when it hosts the 2026 IMF-World Bank Group Annual Meetings from 12 to 18 October. The international gathering will require reliable IT systems and network connectivity not only for QSNCC's own operations, but also for internet services used by participants throughout the event.

Utintu also stressed that the certification is intended to reflect an organisation-wide approach rather than a purely technical upgrade.

“Strengthening IT systems and data security goes beyond technology. It requires people, processes, technology, and infrastructure to work together as one system. Receiving ISO/IEC 27001:2022 certification is part of building a strong IT foundation, ensuring that QSNCC’s systems and services are secure and ready to serve. This enables us to support event organizers across a wide range of event formats, particularly international events and large organizations that require both efficient systems and rigorous data protection,” Surapol added.

The ISO/IEC 27001:2022 certification adds to a wider portfolio of management and sustainability standards already held by QSNCC. These include ISO 9001 for quality management, ISO 22000 for food safety management, ISO 20121 for sustainable event management and ISO 14064-1 Carbon Footprint for Organization (CFO), covering the measurement, reporting and verification of greenhouse gas emissions.

The venue says these standards require regular assessment and continuous improvement, supporting the ongoing development of its IT systems and infrastructure as technology changes. Its wider programme covers management systems, people, technology, data security, service quality, environmental responsibility and sustainability, with the stated objective of meeting the evolving requirements of the MICE industry.

The certification therefore places information security alongside quality, food safety, sustainability and carbon management as part of QSNCC's broader operational framework for hosting international events.
 

Published by Meeting Media Company, the publisher of Headquarters Magazine (HQ) – a leading international publication based in Brussels, serving the global MICE industry and association community.