QuantSec Logo - Cybersecurity Services

Policies

Transparency. Trust. Total Compliance.

Our commitment to security excellence through industry-leading certifications and ethical business practices. IRAP-assessed and ISO 27001 certified.

Certifications & Compliance Standards

ISO/IEC 27001:2022 Information Security Management

ISO 27001:2022

International standard for information security management systems

  • •Rigorous information security management
  • •Comprehensive risk assessment and mitigation
  • •Continuous improvement processes
  • •Annual third-party audits

Certified 2023

IRAP Assessment - Information Security Registered Assessors Program

IRAP Assessment

Information Security Registered Assessors Program

  • •Australian Government-recognized security assessment
  • •Validates highest-tier security protocols
  • •Critical infrastructure protection standards
  • •Government-grade security compliance

Assessed 2023

ACSC Guidelines - Australian Cyber Security Centre

ACSC Guidelines

Australian Cyber Security Centre compliance

  • •National cybersecurity best practices
  • •Critical infrastructure protection
  • •Threat intelligence integration
  • •Essential Eight implementation

Aligned 2024

Comprehensive Policy Framework

Information Security Policy

Comprehensive approach to protecting client and company data

Key Principles:

  • End-to-end encryption for all data transmission
  • Proactive vulnerability management and patching
  • Continuous threat monitoring and detection
  • Multi-layered security architecture implementation

Scope: All systems, data, and personnel

Data Privacy Policy

Strict adherence to Australian Privacy Principles and GDPR

Key Principles:

  • Data minimisation and purpose limitation
  • Transparent data collection and usage practices
  • Robust consent management processes
  • Individual rights protection and data subject access

Scope: All personal and sensitive data

Acceptable Use Policy

Clear guidelines for technology and information asset usage

Key Principles:

  • Prohibited activities and security violations
  • Incident reporting and response procedures
  • Monitoring and enforcement mechanisms
  • Employee and contractor responsibilities

Scope: All users and systems

Incident Response Policy

Rapid, structured approach to security incidents and breaches

Key Principles:

  • 24/7 response capabilities and escalation procedures
  • Regulatory compliance and notification requirements
  • Transparent communication protocols with stakeholders
  • Comprehensive post-incident analysis and improvement

Scope: All security incidents

Vendor Risk Management Policy

Rigorous third-party security assessments and ongoing monitoring

Key Principles:

  • Comprehensive vendor security assessments
  • Continuous vendor security monitoring
  • Contractual security requirements and SLAs
  • Regular risk evaluations and security audits

Scope: All third-party relationships

Business Continuity Policy

Ensuring operational resilience and disaster recovery capabilities

Key Principles:

  • Comprehensive business impact analysis
  • Recovery time and point objectives definition
  • Regular testing and validation procedures
  • Stakeholder communication and coordination

Scope: All critical business functions

Ethical Standards & Corporate Responsibility

Integrity Commitments

Zero Tolerance for Corruption

Strict anti-corruption policies with regular training and monitoring

Whistleblower Protection Program

Safe reporting channels with legal protection and anonymity options

Transparent Business Practices

Open communication about policies, procedures, and decision-making

Ethical Decision-Making Framework

Structured approach to ethical dilemmas and business decisions

Responsible Business Practices

Environmental Sustainability

Carbon neutrality targets and eco-friendly IT operations

Diversity & Inclusion

Equal opportunity employment and inclusive workplace culture

Social Responsibility Initiatives

Community engagement and charitable support programs

Ethical Technology Usage

Responsible AI, data ethics, and digital rights advocacy

Policy Documentation Access

  • Complete policy library with version control
  • Regular policy updates and revision history
  • Audit reports and attestation letters
  • Secure portal access for authorised partners
Request Policy Documentation

Compliance & Governance Team

Email Contact

compliance@quantsec.com.au

Phone Support

1300 646 416

Business Hours

Business Hours: Monday - Friday, 9:00 AM - 5:00 PM AEST

24/7 emergency support available

Contact Compliance Team