ISO 27001

ISO 27001 Information Security Management System Accreditation is an internationally recognised standard for information security management which provides a common framework for managing security across businesses and borders. Achieving the ISO 27001 accreditation in 2017 was an important benchmark for The Tracing Group as it confirms that all internal systems reflect this high standard and that clients can trust The Tracing Group’s practices. As part of the ongoing commitment to maintaining this accreditation, The Tracing Group is audited regularly internally and externally.

Financial Services Qualification System (FSQS)

FSQS is a community of financial institutions, including banks, building societies, insurance companies and investment services, collaborating to agree on a single standard for collecting the increasing amount and complexity of third-party information needed to demonstrate compliance with regulators, internal policies and governance controls.

The Tracing Group team are proud to have completed the stringent FSQS approval process following an invitation to apply in 2019 and recognise this as an important milestone. The extensive accreditation process allows The Tracing Group to work as a preferred supplier for some of the UK’s leading financial institutions.

Penetration Testing

The Tracing Group are proud to be penetration tested by CREST, and CHECK-approved DigitialXRAID. DigitalXRAID is a full-service cyber security specialist, with every employee accredited to the highest standard to ensure technical excellence. The Tracing Group undergo Penetration Testing to understand the current threat landscape and the open attack vectors facing the organisation. This highlights how malicious threat actors could manipulate these issues. DigitalXRAID simulates a controlled ethical hack in the form of an External Infrastructure and Web Application Penetration Test against the FTP Server Application.

Due diligence

Data and information need to be safe, secure, and accessible. Information security is important for privacy, confidentiality and the smooth functioning of systems and supply chains in today’s interconnected world.

Clients

The Tracing Group team recognise that, in contractual relationships, clients must seek assurance that working processes and systems are well-considered, appropriate and, more importantly, compliant. The Tracing Group team are used to working closely and proactively with clients to ensure all the pre-requisite security checks are completed promptly and efficiently to ensure approved supplier status is achieved.

Suppliers

Working closely with suppliers that may hold data to ensure that the requisite Security Due Diligence standards are met builds confidence with all relevant parties that data is stored securely and processed in line with ISO 27001 requirements and legislative and regulatory obligations.