Physical Security

Does your organisation enforce a secure physical perimeter around all of its physical locations (e.g. offices, data centres...)?

Yes.

Our data centres are managed by AWS, who were selected for their data centre security and accreditations. Please see this link for more information: https://aws.amazon.com/compliance/data-center/controls/

We do not have a dedicated office. We make use of a co-working facility, named CoWork, who take care of all security. No Commonplace data or devices storing Commonplace data are stored at Co-Work.

More information: https://commonplace.atlassian.net/l/cp/v04fxZUE

Does your organisation use CCTV to monitor entry and exit points of all premises?

Yes.

Data centres have CCTV: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. We make use of a co-working facility, named Co-Work, who take care of all security and have CCTV in place. No Commonplace data or devices storing Commonplace data are stored at Co-Work

More information: https://commonplace.atlassian.net/l/cp/tqK9wFXr

Does your organisation use an access control system on its premises entry and exit points that includes logging of access?

Data centres have access control systems: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. We make use of a co-working facility, named Co-Work, who take care of all security and have access control in place using a fob. No Commonplace data or devices storing Commonplace data are stored at Co-Work.

More information: https://commonplace.atlassian.net/l/cp/18H6ntV4

Are all of your organisation's physical premises secured with an alarm?

Data centres have alarm systems: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. We make use of a co-working facility, named Co-Work, who do not have an alarm in order to allow for 24/7 access of employees. Access is managed and monitored using access control and CCTV. No Commonplace data or devices storing Commonplace data are stored at Co-Work.

More information: https://commonplace.atlassian.net/l/cp/3BvmqLEb

Are all of your organisation's physical premises manned 24/7 by a security team or reception team?

Data centres have security teams: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. We make use of a co-working facility, named Co-Work, who do not have an on site reception or security team. Access to the perimeter is managed and monitored using access control and CCTV. No Commonplace data or devices storing Commonplace data are stored at Co-Work.

More information: https://commonplace.atlassian.net/l/cp/AVAZPG31

Does your organisation use visitor log books (or the digital equivalent) to record visitors at all premises?

Data centres have visitor procedures: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. We make use of a co-working facility, named Co-Work, who do not have visitor procedures. Access to the perimeter is managed and monitored using access control and CCTV. No Commonplace data or devices storing Commonplace data are stored at Co-Work.

Does your organisation require visitors to undergo an ID check on arrival at all premises?

Data centres have visitor procedures: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. We make use of a co-working facility, named Co-Work, who do not have visitor ID procedures. Access to the perimeter is managed and monitored using access control and CCTV. No Commonplace data or devices storing Commonplace data are stored at Co-Work.

Does your organisation protect sensitive equipment from power failures?

Data centres have uninterruptible power supplies and redundant power systems: https://aws.amazon.com/compliance/data-center/controls/. We do not control or have access to this.

We do not have a dedicated office. In the case of an interruption to power, employees will be able to return to home, their normal place of work. If this is not possible, we arrange a suitable place for employees to work until service is restored. All employees use laptops.

Does your organisation ensure confidential paper waste is disposed of securely?

We are a paperless business.