Security Awareness Program

FundApps management believe that embedding security into the culture of FundApps is critical to the success of our information security program, and as such this is a management priority.

We have the following in place to achieve this:

• New starter survey to set the tone for those who join our organization, followed up by IT security survey a month later to raise awareness of our approach including staff security policies, data classification and our BYOD policies

• 6 monthly IT security survey for existing staff to assess awareness and identify improvements

• Monthly company-wide security session, to discuss any issues that may have arisen, clarify policies (such as data classification), identify improvements and new risks

• Channels in company communication tool with security news

• Our secure software development lifecycle and specifically the scoping and review process

• Monthly security review session for key stakeholders where we actively review security access lists, audit logs and risk register

• Culture of continuous improvement across all areas of the business