At ATEB we have always been committed to the security of our customer’s data. However, proving this has been difficult and is why we embarked on the journey towards ISO 27001 certification back in 2017.
ISO 27001 is the internationally recognised standard for information security and it’s one of the few standards that uses a top-down, risk-based approach to evaluation. It helps identify requirements and specifications for a comprehensive Information Security Management System (ISMS), defining how an organisation should manage and treat information more securely, including applicable security controls.
To gain certification, ATEB’s ISMS was audited by the British Assessment Bureau. This took place after we had been through a rigorous internal review programme and implemented a series of new policies and procedures. With GDPR just around the corner, we believe this puts us in a much stronger position towards attaining GDPR compliance.
Our customer data is of utmost importance to us and we view ISO 27001 as just the start. We are committed to continuous improvement and will be announcing some changes to our systems in relation to GDPR very soon.
Consumer Duty: It’s a matter of Principle
Huw Reynolds Compliance Conduct, FCA, PI, protection
Apologies for the Consumer Duty overload but unless you’re taking a regulatory sabbatical, this is very much a hot topic. There are in excess of 50 FCA Handbooks (rules and guidance). You cannot be expected to be conversant with all of them, but you should have a good handle on the key ones, such […]