Security Overview

1. Security Principles

Our approach is based on Security by Design, least privilege, defence in depth and continuous improvement.

We use professionally managed infrastructure, secure configuration, software updates and layered security controls.

Access to systems is restricted to authorised personnel with permissions granted according to role and business need.

We use encryption in transit and, where appropriate, encryption at rest to help protect information.

Systems are monitored to support security, availability and the timely investigation of unusual activity.

Regular backups and recovery procedures help support business continuity and resilience.

We apply security updates, review vulnerabilities and address identified risks as part of ongoing maintenance.

Trusted suppliers are selected carefully and expected to maintain appropriate security standards.

We maintain procedures for identifying, managing and responding to security incidents where required.

Security is reviewed continuously as our platform, technology and regulatory environment evolve.

•••••