In March 2025, the management and operation of the .lu top-level domain registry has been recertified ISO/IEC 27001, moving in parallel to the ISO/IEC 27001:2022 standard, attesting to the continuous improvement of .lu since 2022 in the interest of Luxembourg.

Since 17 March 2025, the information security management system (ISMS) implemented by the Restena Foundation for managing and operating the .lu top-level domain registry and providing its IT network, hosting, and security services, including processes to support these activities, has been certified under a new certification cycle in accordance with the ISO/IEC 27001:2022 standard.

The activities carried out under the .lu registry therefore fall under the scope of this new cycle of certification, which attests, among other things, that Restena provides an efficient and secure Domain Name System (DNS) and respects and complies with regulations and standards.

Valid until March 2028, ISO 27001:2022 certification confirms the initial ambition undertaken in 2022 to always integrate additional security into the heart of its activities. This second certification cycle was driven by two European directives, the first on measures for a high common level of cybersecurity across the Union (‘NIS 2 directive’) and the second on the resilience of critical entities (CER).