At ATEB we have always been committed to the security of our customer’s data. However, proving this has been difficult and is why we embarked on the journey towards ISO 27001 certification back in 2017.
ISO 27001 is the internationally recognised standard for information security and it’s one of the few standards that uses a top-down, risk-based approach to evaluation. It helps identify requirements and specifications for a comprehensive Information Security Management System (ISMS), defining how an organisation should manage and treat information more securely, including applicable security controls.
To gain certification, ATEB’s ISMS was audited by the British Assessment Bureau. This took place after we had been through a rigorous internal review programme and implemented a series of new policies and procedures. With GDPR just around the corner, we believe this puts us in a much stronger position towards attaining GDPR compliance.
Our customer data is of utmost importance to us and we view ISO 27001 as just the start. We are committed to continuous improvement and will be announcing some changes to our systems in relation to GDPR very soon.
FG 21/3 – client objectives
Alistair MacDougall Compliance Drawdown, FCA, ML, Pension, Pension Transfer, PI, transfer
Following on from our previous articles on FG21/3, we will look today at another of the interesting areas covered by the guidance. It goes without saying that the guidance itself is helpful, reiterating and emphasising previous rules and guidance and clarifying some areas that were arguably fuzzy before. However, as well as the actual content, […]