Data Security

Security policies and procedures in place

Data integrity and security is critical for our clients – we have our security policies and procedures in place and achieved ISO 27001 accreditation in 2020.

ISO 27001 is a framework for an Information Security Management System (ISMS) to address the management of information risks.

These information security controls protect the confidentiality, integrity, and availability of information with risk management as the primary driver of the control objectives.

The standard is structured logically around 14 security control families, 35 control objectives, and more than 114 individual controls.

ISO/IEC 27001 is designed to cover much more than just IT and at Cool Harbour, we want to ensure that we:

Systematically examine the organization's information security risks, taking account of the threats, vulnerabilities, and impacts; Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that are deemed unacceptable; and

Adopt an overarching management process to ensure that the information security controls continue to meet the organization's information security needs on an ongoing basis.

Put a business continuity plan and a system in place that ensures objectives and plans include data security and are reviewed continuously for relevancy.