Data Security

ISOMS from ISO-Office (www.iso-office.co.za) was developed using the latest in web-based technology and is completely independent from any on-premise server infrastructure at the client.

ISO-Office comply with the requirements stipulated within ISO:27001:2013, as well as the local Protection of Personal Information Act (PoPIA), the General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA)

L1-02 ISO-Office Information Security Policy:

​

ISO-Office’s “LICENSE AGREEMENT” include annual upgrades to our ISOMS platform as part of the agreement. These upgrades are imbedded into the annual license fees.

All registered system users’ emails, names and surnames is saved within the system. All authentication, including passwords, and user authentication tokens, is managed through Google Authentication, meaning we never store user passwords.

Data Backups:

While ISO-Office have never experienced data loss due to issues related to server availability or integrity, which can be attributed to Google Cloud’s excellent infrastructure, ISO-Office still generate 2 daily backups of all client data, which we keep for a rolling period of 90 days on an independent storage solution. These recovery points can be restored upon special request.

ISO-Office furthermore secure various access points within our ISOMS platform as set by the client.  ISOMS allow in depth Roles and permissions functions allowing the Super Users to regulate the product’s user management and permission handling aspects. ISOMS also present an Audit Trail function to the Admin user/s. The audit trail, when logging into the ISOMS application, offers information about who did what and when. Such audit data is critical for diagnosing any misplacement of data, and it’s also a great enforcement service.

Service Provider information:

ISO-Office is a SaaS (Software as a Service) Proprietary Software Company.

Software-as-a-service (SaaS) is an on-demand, cloud-based software delivery model that enables organizations to subscribe to the applications they need without hosting them in house. SaaS is one of several categories of cloud subscription services, including platform-as-a-service and infrastructure-as-a-service. SaaS has become increasingly popular because it saves organizations from needing to purchase servers and other infrastructure or maintain an in-house support staff. Instead, a SaaS provider hosts and provides SaaS security and maintenance to their software.

Some well-known SaaS applications include Microsoft Office 365, SAGE One, Salesforce.com, Cisco Webex, Box, and Adobe Creative Cloud. Most enterprise software vendors also offer cloud versions of their applications, such as Oracle Financials Cloud.