a team that shares your commitment to people, responsibility and safety

A team that shares your commitment to people, responsibility and safety

Cyber security

Led by our IT security team, our cyber security framework is derived from the NIST CSF 1.1 control framework under four key pillars:

  • Enabling our people to operate safely
  • Keeping our connected assets safe
  • Protecting the digital journeys of our customers
  • Securing our IT infrastructure

We also have a Cyber Security Forum to oversee administrative, technical and operational controls, creating a culture of security across the business. Our ongoing performance is then measured through multiple systems, including regular reporting, cyber security ratings like the BitSight score, ongoing training and testing, and more.

Information Security Management System
Aligned to ISO/IEC27001:2013

UK Cyber Essentials Plus
certified

Quarterly Cyber Security Forum
to make continual improvements in our security posture