Zoom has updated its videoconferencing platform with a new wave of cybersecurity enhancements to its service, including new third-party certifications and attestations, product innovations, and updates to existing programmes.
Zoom CISO Jason Lee said “Safety, security and privacy are at the core of how we make decisions at Zoom and enhance our platform. We remain committed to being a platform that users can trust for all of their online interactions, information and business.”
Third-party certifications and attestations, according to Lee, demonstrated the effectiveness of Zoom’s cyber transformation initiatives. It has lately received several authorisations and certifications from bodies in Germany, the Netherlands, and the United States, in addition to the National Cyber Security Centre’s (NCSC’s) Cyber Essentials Plus badge in the United Kingdom.
Zoom’s platform – which includes Chat, Meetings, Phone, Rooms, and Webinar – recently became compliant with the ISO/IEC’s 27001:2013 certification, and the company also expanded the scope of its SOC 2 Type II report to fulfill the control criteria of the Health Information Trust Alliance Common Security Framework (HITRUST CSF).
It is introducing new security and privacy features that are now available to all users via a newly developed automatic update system, which prevents users from missing or ignoring patches.
Other innovations planned for the rest of 2022 include a Bring-your-own-key/encryption (BYOK/E) feature which is a cloud security model that allows service users to deploy their own encryption software and manage their own keys by deploying a virtualized instance of their own service against the hosted service or application. Zoom plans to introduce end-to-end encryption to the Zoom Phone service for one-on-one, intra-account phone calls made via its client.