Infrastructure security
7- Encryption in transit
- Encryption at rest
- Vulnerability identification
- Vulnerability prioritisation
- Vulnerability remediation
- Security event recording
- Security event monitoring
Security & assurance
Controls
How Onsi secures its platform, people and data, grouped by control area.
Organisational security
7- Information security governance
- ISMS structure
- ISMS operation
- Certification scope
- Access provisioning
- Access reviews
- Access removal
Product security
6- Security in software development
- Security in software changes
- Password standards
- Multi-factor authentication standards
- Secure authentication
- Independent security testing
Business continuity & resilience
4- Data backup
- Restoration testing
- Recovery objectives
- Continuity testing approach
Data & privacy
7- Personal data collection
- Personal data use
- UK GDPR commitments
- Data protection obligations
- Customer data processing terms
- Data retention
- Secure disposal
Your trust. Our commitment.Questions? Contact us