In short: How we protect our clients’ and our own information.
Commitment
We protect the confidentiality, integrity and availability of information we hold.
Key controls
- Access only for those who need it, with strong authentication.
- Encryption of data in transit and, where appropriate, at rest.
- Audit logs for important actions.
- Regular updates and security reviews.
- Secure development and testing practices.
- Backups and tested recovery plans.
People
Staff receive security training and must report incidents immediately.
Incidents
We investigate incidents promptly, limit their impact and notify clients and authorities where required.