GDPR and Security / Assuring staff security

• We screen staff prior to employment.
• Our Employment terms and conditions include responsibilities for data and information security.
• Staff Induction includes a section on information and data security.

We have an internal process for managing and reporting security incidents.

Staff access to systems is revoked immediately when an employee leaves the business.

We have tooling to identify attempts to compromise staff credentials and train staff to recognise common attacks.

We have access control on all of the doors that lead from communal areas. Access to the building is controlled through electronic passes on door locks and access gates. There is a reception at the main entrance which is staffed 24 hours a day with specialist security present. CCTV is present throughout the building. Additional security measures are present in areas containing access to data processing facilities.