Code Enigma is ISO 27001 certified, a part of which involves us having a comprehensive incident management procedure. As a part of this, we encourage incident reports from anyone, be they customers, suppliers, staff or concerned members of the public. An incident is anything that actively threatens or might threaten Code Enigma's information security based on the CIA triad, Confidentially (e.g. sensitive document disclosure), Integrity (e.g. corrupted database) and Availability (e.g. failed IT service). Examples of security incidents include (but are not limited to):
-
Retrieving Code Enigma equipment.
-
Sensitive paper documents left unattended on printers, scanners, fax machines, etc.
-
Sending personal information intended for one party to a different party.
-
Suspicious user activity.
-
Unavailable services (e.g. due to a Distributed Denial of Service attack)
If you observe something you consider to be of a concern to the information security of Code Enigma then we invite you to report it using our contact form, which can be found at the bottom of every page. As a general rule, if in doubt, report it!