Security
Information Security & Compliance
We care about Information Security, therefore we work continuously to align our processes and services to the best practices and guidelines.
Our established process and roadmap.
Monks has established a global Information Security Management System aligned with the ISO27001 standard, which is being certified in different offices around the globe. Below are our compliance achievements as well as the roadmap for improving our maturity level down the line.
Certification
ISO27001:2022
Our global Information Security Management System has been certified under the ISO27001 standard. This certification means that Monks has implemented and maintains a rigorous security program in accordance with the ISO27001:2022 standard, has a systematic approach to managing sensitive information and has implemented controls to protect it against unauthorized access, misuse, disclosure, or destruction. This certification provides assurance to our customers, stakeholders, and partners that we have implemented adequate measures to protect their information.
ISO 27001 covers controls in 14 sections: information security policies, organization of information security, human resource security, asset management, access control, cryptography, physical and environmental security, operations security, communications security, system acquisition, development and maintenance, supplier relationships, information security incident management, and information security aspects of business continuity management.
Certification
TISAX
We are committed to the automotive industry information security standards with the TISAX (Trusted Information Security Assessment Exchange) certification allowing us to process sensitive information from your customers as it follows.
The TISAX assessment covers a wide range of information security topics, including access control, data protection, incident management, business continuity, and physical security. The TISAX certification provides a standardized and recognized approach to information security assessment in the automotive industry, which helps to improve the overall security posture of companies working in this sector. It also facilitates the exchange of sensitive information between companies by providing a trusted platform for sharing data.
Certification
UK Cyber Security Essentials
Monks UK offices are certified under the UK Cyber Essentials scheme, a set of guidelines developed by the UK Government to help businesses and organizations protect themselves from common cyber threats. The guidelines are based on five key principles: secure your Internet connection, secure your devices and software, control access to your data and services, protect yourself from viruses and other malware, keep your devices and software up to date.
Assessment
ProcessUnity (former CyberGRX) Tier 2 Report
Monks has successfully completed the ProcessUnity Tier 2 assessment proving an adequate security posture within this Third Party Risk Management framework.
Security Controls
We’ve set up safeguards to avoid and minimize any security risks. These protections cover four main areas: organizational security, internal security, infrastructure security, and data protection. Learn more about these controls in detail.
The Monks Information Security Team shall be reached out for any security related matter or question through security@mediamonks.com