Entity has a documented Risk Assessment and Management Policy that describes the processes in place to identify risks to business objectives and how those risks are assessed and mitigated. The objectives incorporate Entity’s service commitments and system requirements.
Entity ensures that all planned changes undergo a review and approval process as per the guidelines documented in the change management policy
Entity uses a change management system to track, review and log all changes to the application code.
Entity has a documented Change Management Policy, which is available to all Staff Members via the company employee portal
Entity identifies vulnerabilities on the company platform through annual penetration testing exercise conducted by a qualified third party service provider.
Entity’s Production assets are continuously monitored to generate alerts and take immediate action where necessary