A robust process
We have renewed our ISO 27001 certification following this year’s external audit, maintaining our position as an ISO 27001 certified digital agency.
For many of the charities we work with, information security is a practical issue rather than an abstract one.
Given they handle sensitive data, often supporting vulnerable communities, they need to have digital services that are dependable and secure.
Maintaining this certification for a second year running independently confirms that we have clear and robust processes in place to manage and protect sensitive information across the business.
Security built into how we work
ISO 27001 centres on an Information Security Management System (ISMS). In simple terms, it’s a framework for identifying risks, controlling access to information and reviewing how data is protected.
For us, that isn’t something that sits in a policy document. It’s part of how we run projects, manage infrastructure and support the websites our clients depend on every day.
The audit looks at how those practices actually operate day to day – not just how they appear in policy documents. Passing the audit confirms that our systems and controls continue to meet the standard.
