Information Security Policy Statement

SilverDoor’s Information Security Policy sets out the standard for the general management and direction of security for all of its systems and data. This policy concerns all information security from the information and data of staff members to external parties such as clients and property partners.

The company uses information and data for a number of different means and it does so with the confidence that all data is accurate, up-to-date and correct. SilverDoor also ensures that all data is adequately protected from misuse, unauthorised access or disclosure, damage or loss.

This policy forms the backbone of the Information Security Management System (ISMS). The purpose of the ISMS is to proactively identify, mitigate, monitor and manage information security vulnerabilities and protect SilverDoor and its assets.

Our Information Security Policy is made up of the following sub-policies:

Internal Information Security Handbook
Threat and Risk Assessment Policy
Access Control Policy
IT Incident Management and Response Policy
Media Storage and Handling Policy
Password Policy
Remote Worker Policy
Mobile Access Policy
Disaster Recovery Policy
Backup and Retention Policy
Bring Your Own Device (BYOD) Policy
Network Security Policy
Change Management Policy
User Administration Policy
Operations Management Policy
Data Protection Policy
Compliance
Problem Management
Physical and Perimeter

The ISMS applies to all SilverDoor employees and users of SilverDoor assets, systems, applications and data. The relevance that the ISMS has on the responsibilities of all staff is why the company offers training on general data protection and information security. The Training and Development team carry out this training during all staff inductions and also offer it to employees who require an update on data protection and the ways in which SilverDoor use data.

Hanish Vithal
Chief Information and Technology Officer
November 2023