Info-Tech Systems Security Compliance Overview

This document is a security white paper that outlines the certifications and security measures implemented by Info-Tech Systems Ltd. It details the compliance with ISMS ISO 27001:2022 and the Data Protection Trustmark (DPTM) certification, which ensures responsible management of personal data. The paper describes the use of Microsoft Azure as a cloud service provider, emphasizing the multi-layered security protocols in place, including data encryption in transit and at rest using TLS 1.2 and AES 256-bit encryption. Additionally, it covers security threat and vulnerability management practices, including regular internal and external assessments. User authentication methods, such as standard login and Two-Factor Authentication (2FA), are also detailed. The document discusses the password policy, customer database backup and retention practices, and the importance of employee security awareness training. Furthermore, it explains the disposal of physical devices and the incident management process for potential data breaches, highlighting the commitment to data safety and security.