Both internal and external vulnerability and risk assessment tests are conducted on a quarterly basis and when significant changes to the environment occur, such as changes to security controls, threats or organisational infrastructure. These tests are supplemented by regular internal and external penetration tests carried out by an autonomous third party.
The data held and business processes undertaken by CDS Global are protected by a strenuous agenda of audits and controls on transactions, procedures, systems and networks.
The CDS Global security policy is based on the international standard BS 7799 / ISO 17799 and adopts the Payment Card Industry (PCI) security standards as well as being Sarbanes Oxley (SOX) compliant.
All offices have a 24-hour surveillance, access control and round the clock security personnel, as well as ID/access badges being carried by all staff, visitors and contractors. |
