Security, Privacy
and Compliance.
How CyTech protects the data its clients entrust to it, the independent evidence behind it, and how to review it with us.
Certified and Audited.
ISO/IEC 27001:2022
Certified. Certificate SIS010224I157, issued by SIS Certifications, valid to February 16, 2027. Held continuously since 2020.
SOC 2 Type II
A clean opinion with no exceptions. Security, Availability and Confidentiality, for March 1 to August 31, 2026.
Privacy
A named Data Protection Officer, Mr. Chen Heffer, and a published privacy policy.
Tested by an Independent Auditor.
Access
Least privilege and need-to-know access, multi-factor authentication, and periodic review of production access.
Encryption
TLS 1.2 or higher for confidential information in transit, and confidential data encrypted before it moves to a cloud environment.
Monitoring
Monitoring 24/7/365 by the CyTech Cyber Fusion Center, on AQUILA SIEM and centralized logging.
Incident Response
A documented response plan and escalation protocol, with post-incident review.
Testing
Penetration testing of AQUILA C4I and the corporate perimeter at least annually and after material changes.
Continuity
Backups, recovery objectives and disaster recovery testing.
People
Screening proportionate to role, confidentiality undertakings, and security and privacy training within 30 days of joining.
Change and Development
Change management and segregation of duties between development, change approval and production deployment.