Security & Trust

Information Security Policy

Information security is critical to maintaining the reputation and brand of Complexica and its ongoing success and viability. Our core security principle is to ensure the confidentiality, integrity and availability of the information entrusted to us by our customers and business partners, as well as our own information. As such, we aim to provide assurance to internal and external stakeholders of the security and privacy of their information entrusted to Complexica, whether in storage, processing or transmission.

To realise this principle, we are committed to the following security objectives:

• Maintain a culture of security awareness amongst Complexica staff by emphasising that everyone has responsibility and accountability for the protection of information.
• Implement effective security controls to ensure the confidentiality, integrity and availability of information.
• Operate an Information Security Management System in accordance with the ISO/IEC 27001 information security standard to provide a mechanism for the continual improvement of information security practices at Complexica.
• Assign responsibilities and providing adequate resources to ensure a structured and consistent approach to managing information security.
• Monitor systems and investigating all detected security breaches and weaknesses.
• Promote a disciplined approach, aligned with our risk management framework, to the identification and management of information security risks across the business.
• Maintain the confidentiality, integrity and availability of information assets in compliance with policy, legal, regulatory and contractual requirements.
• Monitor and measuring our performance against our security objectives to ensure commitment to the continual improvement of information security practices.
• Provide assurance to customers and interested parties of the security of their information whether in storage, processing or transmission.
• Maintain the good reputation of Complexica.

This policy applies to:

• All full time, part time, casual, or contracted Complexica personnel
• All suppliers providing services to Complexica
• Any other third parties with a valid reason to access information held by Complexica

ISO 27001 is the most widely recognised international standard outlining best practices for information security management systems. The standard was published in October 2013 by the International Organisation for Standardisation (ISO) and the International Electrotechnical Commission (IEC) and ensures that organisations have established methodologies and a framework of business and IT processes to help identify, manage, and reduce risks. More information about this standard can be found on the ISO website.

Complexica's certification details are publicly available on TQCSI Certificate Directory