1. Our Cybersecurity Commitment

Cybersecurity is integral to our business operations.
We protect client and business data through a layered approach combining people, processes, and technology — fully aligned with the
UK National Cyber Security Centre (NCSC) best-practice guidelines.

2. Key Security Principles

• Confidentiality – Data is accessible only to authorised users.
• Integrity – Information is accurate, complete, and safeguarded from alteration.
• Availability – Systems and data are protected from disruption through redundancy and backups.

3. Technical Security Controls

We use industry-standard technologies and practices to secure all systems and digital assets:

• SSL/TLS 1.3 encryption across all websites and services.
• Multi-factor authentication (MFA) for administrative access.
• Regular software updates and patch management.
• 24/7 server monitoring with anomaly detection.
• UK-based, ISO 27001-certified hosting environments.
• Firewall, DDoS mitigation, and intrusion detection systems.
• Encrypted data backups stored in multiple secure UK data centres.

4. Staff Awareness & Training

All employees receive regular cybersecurity awareness training, including password hygiene, phishing prevention, and incident reporting.
Access to systems is strictly role-based and reviewed periodically.

5. Incident Response & Business Continuity

We maintain a comprehensive Incident Response Plan and Business Continuity Framework.
In the event of a cyber incident, affected systems are immediately isolated, assessed, and remediated in line with our
Data Protection Policy and ICO reporting requirements.

6. Third-Party Security

We only work with trusted, GDPR-compliant service providers who meet our security standards.
All third-party vendors sign formal agreements that include confidentiality and data-protection clauses.

7. Compliance & Monitoring

• Annual penetration testing and vulnerability assessments.
• Ongoing monitoring for emerging cybersecurity threats.
• Alignment with NCSC Cyber Essentials and ISO 27001 controls.

8. Reporting Security Concerns

We encourage responsible disclosure of any suspected vulnerabilities or threats.
To report a potential issue, please contact our Security Team at:
Email: security@compareyourbusinesscosts.co.uk
Address: Point 1 Solutions Ltd, London, United Kingdom