Information Security Policy

Our commitment to information security

SeQuenX is committed to protecting the confidentiality, integrity and availability of information handled during its business activities. This commitment applies to relevant SeQuenX companies, employees, contractors, systems and business processes.

Information security is an important part of how we work with clients, manage information and deliver software engineering and consulting services.

Information security management

SeQuenX follows information security practices intended to identify and manage risks, protect information assets and support the secure operation of its business.

Our published information security policy references an Information Security Management System (ISMS) based on ISO/IEC 27001:2013. The current standard reference and any statement about certification or formal conformity must be verified against the company's current status before publication.

People and confidentiality

Information security responsibilities should be understood by people who handle company, client or other confidential information. Relevant personnel are provided with appropriate guidance and training.

Confidentiality obligations and agreements apply where required by the person's role, contractual arrangements or company policies.

• Information security awareness and staff training
• Confidentiality agreements where applicable
• Defined responsibilities for handling information
• Awareness of relevant security procedures and requirements

Physical and operational security

SeQuenX uses appropriate physical and operational security measures to help protect information and the systems used to process it. Measures should reflect the nature of the information, the working environment and the risks involved.

• Physical safeguards appropriate to the environment
• Secure operational practices
• Protection of systems and information assets
• Security reviews, assessments and audits where applicable

Access control

Access to information and systems should be restricted to authorized individuals according to their responsibilities and legitimate business needs. Access permissions should be managed in line with relevant security procedures.

Appropriate safeguards help reduce the risk of unauthorized access, disclosure, alteration or loss of information.

• Access authorization based on business need
• Appropriate management of user access
• Protection of confidential and sensitive information
• Review of access and security controls where appropriate

Data communication and protection

Information communicated through networks and systems should be protected using safeguards appropriate to its sensitivity and the risks involved. Encryption and other technical measures may be used where appropriate to protect information in transit or during storage.

Business continuity and recovery

SeQuenX recognizes the importance of preparing for disruptions that could affect systems, information or service delivery. Appropriate continuity and recovery arrangements help reduce disruption and support the restoration of important operations.

Review and continual improvement

Information security practices should be reviewed as business activities, technologies, risks and applicable requirements change. SeQuenX aims to maintain and improve appropriate controls to support the protection of information.

Questions about information security can be directed to SeQuenX using the contact details published on this website.