Information Security
1. Policy Objectives & Executive Mandate
At Techsteps UK Limited, information security is central to our commercial promise. Our corporate clients—spanning Tier-1 investment banks, NHS Trusts, Ministry of Defence contractors, and central government bodies—rely on us to securely store, digitise, sanitise, and destroy their most sensitive digital and physical information assets. Our Information Security Management System (ISMS) is certified to ISO/IEC 27001:2022 and validated through annual third-party UKAS audits. The objective of this policy is to safeguard the Confidentiality, Integrity, and Availability (CIA) of all client and corporate data under our custody.
2. Security Accreditations & Standards Matrix
We validate our operational security through continuous independent accreditations:
ISO/IEC 27001:2022 (Certified)
ADISA Standard 8.0 (Pass with Distinction)
Cyber Essentials Plus (Crown Commercial Validated)
BS EN 15713:2009 (Secure Destruction)
3. Physical, Transit & Technical Safeguards
Our processing centres feature 24/7 CCTV surveillance with 90-day retention, multi-factor biometric turnstiles, and segregated air-gapped forensic sanitisation rooms. Mobile transit utilizes solid-sided, GPS-tracked vehicles with remote engine immobilisation. Logical sanitisation conforms strictly to NIST Special Publication 800-88 Revision 1 (Purge/Clear) with cryptographic verification.
