Unit4 Technical and Organizational Security Measures

This document is a technical report detailing the security measures implemented by Unit4 for its business operations. It outlines both physical and virtual security protocols, emphasizing the importance of access control at Unit4 premises, including manned reception desks and access-controlled doors. The report describes how sensitive information is protected through lockable offices and cabinets, along with secure disposal methods for documents. Additionally, it covers virtual security measures such as asset return protocols upon employee termination, data classification, and anti-malware protections. The document also highlights the role of the Chief Information Security Officer in overseeing security policies, which are regularly reviewed and updated. Furthermore, it discusses data privacy and security by design in Unit4's SaaS applications, detailing encryption practices and data segregation in cloud environments. The report concludes with information on disaster recovery and incident response protocols, ensuring robust protection against potential threats.