Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleDoes your organisation have a defined process that is followed when a client contract is terminated that includes the secure destruction of client data?

Does your organisation have a defined process that is followed when a client contract is terminated that includes the secure destruction of client data?

Yes. Two years after the license ends at the latest, each project is archived and the responses are pseudonomised.

More information: https://commonplace.atlassian.net/l/cp/LZ4JWYHP

Expand
titleDoes your organisation use threat intelligence to inform decisions about information security?

Does your organisation use threat intelligence to inform decisions about information security?

Yes. We are subscribed to a number of newsletters from our vendors and other sources (inc UK NCSC) to maintain an overview of the security landscape across our application and network. All risks are logged in our risk register