Information Security
Trust & Security
At iAudit Global, protecting our clients' data and our own systems is a core part of how we operate. Below is an overview of our security practices.
Penetration Testing
iAudit Global maintains an in-house security analyst with two to three years of penetration testing experience and a strong track record. Full penetration tests are conducted every three months, with all findings and reports formally documented and retained in-house.
Vulnerability Remediation
Once a vulnerability is identified, it is remediated according to its severity level. iAudit Global follows strict response timelines to ensure issues are resolved promptly.
Phishing Simulation Exercises
The security team runs phishing simulation exercises one to two times every six months to test and reinforce employee awareness. Employees who interact with the simulated link receive targeted follow-up training on recognising and avoiding social engineering attacks.
Ongoing Vulnerability Scans
Regular vulnerability scans are run across all company systems as an ongoing health check. These scans operate independently of the quarterly penetration tests, providing continuous coverage between scheduled assessments.
Public Vulnerability Disclosure Program
iAudit Global runs a public vulnerability disclosure program, allowing external security researchers to responsibly report issues they discover. We are committed to working collaboratively with the security research community.
Access Control Register
iAudit Global maintains a formal access control register covering every employee — whether permanent, temporary, or contracted — documenting exactly what systems and resources each person has access to. This register is reviewed and updated on a regular basis, and access is fully revoked whenever an employee leaves the company.
Certifications in Progress
iAudit Global is currently working toward two widely recognised information security certifications, demonstrating our ongoing commitment to verified security excellence.
UK government-backed certification that helps protect organisations against the most common cyber threats.
International standard for information security management systems, recognised globally as the gold standard for information security.
ICO Data Protection Registration
IAuditGlobal Limited is registered with the Information Commissioner's Office (ICO) — the UK's independent body for data protection regulation — confirming our commitment to handling personal data lawfully, transparently, and securely in accordance with UK GDPR.
Talk to us
Have a question about our security practices?
Whether you need a security questionnaire filled, want to review our controls with your team, or have a specific concern — we're happy to help.
Security reports: security@iaudit.global
IAuditGlobal Limited
Unit 17f, The Lansbury Estates, Lower Guildford Road, Knaphill, Woking, Surrey, GU21 2EP
Registered with the Information Commissioner's Office · ICO Registration No. ZB910189