What is the programme?

is an independent certification programme that provides evidence to your customers, business partners and auditors that you take security seriously and have implemented an effective ongoing risk management programme to ensure the security and availability of their information.

The certification mark is a visible and tangible way to ease customers' worries about providing information through your web site(s) and application(s), giving you real competitive advantage.

The programme comprises two levels of certification:

This is designed for organisations that understand the value of their own, their partners' and clients' information assets and want to ensure that their critical infrastructure and applications are as secure as possible. Core to gaining this certification is the understanding that your application(s) and surrounding environment have been thoroughly tested for vulnerabilities and are monitored effectively on an ongoing basis, combined with an effective ongoing programme of remediation.

This is recommended for organisations who deliver significant revenues through their web sites. It helps to protect online business by helping organisations to ensure that their web infrastructure is both available and performing as required, whilst offering an optional certification mark to display on your web site. This helps assure your partners and clients that you understand how crucial web site performance and information availability is to them.