Corporate Security | Security & Trust

Asset management

An asset register, information classification and assigned responsibilities support protection of organisational equipment and information. Understanding what we depend on and who owns it helps guide access, maintenance and recovery decisions.

Our management system includes asset handling and disposal policies. These connect equipment protection with the information the equipment can access, including the systems used for platform development, operations and support.

Assigned responsibilities provide ownership for equipment and information assets.
Classification informs how information should be handled and shared.
Asset return and disposal form part of staff and equipment lifecycle procedures.

Explore information security policies

Staff security

Staff screening, confidentiality responsibilities and joiner/leaver procedures support trusted access to organisational systems. Access is assigned around role requirements, with security expectations introduced when staff join the company.

As responsibilities change, access needs to change with them. Leaver procedures include revoking access and returning organisational assets, helping maintain control over accounts, equipment and information.

Screening and confidentiality arrangements support the employment lifecycle.
Induction covers information handling and reporting security concerns.
Access revocation and asset return support the leaver process.

Explore staff security training

Secure working practices

Documented acceptable-use and remote-working procedures guide how our team handles information and uses organisational systems. They set expectations for devices, secure connections, approved software and reporting concerns.

Security duties form part of everyday work rather than a separate activity at procurement time. Staff are expected to understand the policies relevant to their role and apply them during development, support and customer-facing work.

Use approved systems and follow information-handling requirements.
Protect devices and connections during remote work.
Report suspicious activity, mistakes and potential security issues through the incident route.

Read about secure devices

Internal assessment

Internal assessment and risk review form part of our certified management system. They help us check working practices, identify areas for improvement and track actions alongside independent certification activity.

Reviews bring together policy requirements, operational risks and the findings from incidents or continuity exercises. Corrective actions give the organisation a way to address issues and check the changes that follow.

Internal review supports oversight of security and quality processes.
Risk assessment helps prioritise the controls that matter most.
Corrective actions connect findings with accountable follow-up.

Explore risk management

← All topics Data Privacy →

Asset management

Staff security

Secure working practices

Internal assessment

Secure services start with a conversation.