Standards and assurance
ISO 27001 certification governs how we protect information
A management system for security, not a one-off check
ISO/IEC 27001 is the international standard for information security management systems (ISMS). Rather than testing a fixed list of controls on a single day, it requires us to run a structured, risk-based programme: assessing the risks to the information we hold, choosing the right controls to address them, and proving through regular audits that those controls keep working. For our clients, that means the data and systems we handle on their behalf sit within a framework that is reviewed, measured and improved year after year.
"Our clients trust us with visibility into their most sensitive systems. ISO 27001 gives them independent assurance that we protect that trust with the same discipline we apply to defending their organisations."
- Andy Kays, CEO, Socura
What our ISO 27001 certification covers
- Organisational controls: Information security policies, roles and responsibilities, supplier management, incident management and business continuity, all owned and reviewed by leadership.
- People controls: Screening, security awareness training and clear responsibilities for everyone who handles client information, before, during and after employment.
- Physical controls: Protection of the premises, equipment and storage media where information is held or processed.
- Technological controls: Access management, secure configuration, logging and monitoring, vulnerability management and protection of data in transit and at rest.
Independent assurance for your supplier due diligence
Our certification is audited by an independent certification body, with surveillance audits each year and full recertification every three years. It covers our whole organisation with no exclusions, so it extends to all of the services we deliver. Alongside our ISO 9001 certification, Cyber Essentials Plus certification and CREST-accredited SOC, it gives you a complete picture of how we secure our own operations and the service that protects yours.
