Information Security Practices

Boardingware provides a secure cloud based platform to help schools improve student

safety, increase operational efficiency, and protect student records. As a processor of student information, we understand our customers strict data protection obligations and have adopted industry best practices to ensure that we can protect the confidentiality, integrity, and availability of the information entrusted to us.

This document summarises our processes, policies and security standards we employ, to help you understand our data security practices.

Table of Contents:

‍

1. Introduction

• Purpose of this whitepaper
• Executive statement
• Supporting documents

2. Compliance Programs

• ISO/IEC 27001, 27017, 27018
• Why ISO?
• ISO/IEC 27001
• ISO/IEC 27017 and 27018
• Certified By The British Standards Institute (BSI)
• GDPR

3. Boardingware's Information Security Management

• Business Continuity Management
• Incident Management
• Human Resources
• Secure Development Principles
• Information Classification
• Acceptable Use of Assets
• Access Control
• Support and Escalation
• Cryptographic Controls
• Supplier Security

4. Conclusion