OUR SECURITY COMMITMENT

The CJC information security policy, endorsed by the CJC Board of Directors, aligns with the ISO 27001 framework and certification. This policy mandates the security principles that apply to our people, process, and internal and external technology. The policy and supporting standards are reviewed and updated in response to evolving technical risks, regulatory changes, and client requirements.

Security is at the forefront of what CJC does. We take a zero-trust approach to security, covering internal organisational structures and cloud environments.

CJC's information security management system (ISMS) protects our applications, platforms and infrastructure, safeguarding client data.  Data classifications are applied at CJC to ensure security protections are appropriate to the level of risk attached to the data, protecting and processing data on behalf of clients.

TRAINING

CJC provide detailed online training courses, through the KnowBe4 platform.  All staff, either new or existing must complete the holistic IT Security training programs.

PHYSICAL SECURITY

Our corporate security policy guidelines are based on industry best practices and comply with ISO 27001.  CJC meets country or region-specific standards.

Guidelines include requirements for physical security, building maintenance, fire suppression, cooling, UPS with generator backup, and access to diverse power and communications.

CJC’s policy requires facilities used to deliver a part of a service, whether managed by CJC or a third party, to be subject to comprehensive audits.

CJC’s InfoSec program (including infrastructure, technical controls, processes, policies, and certifications) is periodically reviewed and updated in line with technical risks, regulatory changes and clients’ needs for information security.

With regions/zones available globally, CJC can provide clients with the flexibility to deploy applications as required with interconnectivity between regions across multiple regions/zones.

SECURITY MEASURE HIGHLIGHTS

CJC takes IT security seriously and prioritises the protection of client data. Some of CJC's IT security highlights:

• - Dedicated cybersecurity team.
• - Zero-trust infrastructure.
• - Multi-factor authentication.
• - Strict firewall and network access controls.
• - Network intrusion detection.
• - Web-filtering appliances.
• - Active directory and AD auditing.
• - Windows file system auditing.
• - BYOD management.
• - Penetration testing.
• - Continuous monitoring of cyber threats.
• - Administration credential encryption.
• - Network intrusion detection.
• - Security change request controls.
• - Private network access control.

CJC invests in security products and partnerships, such as Google Chronicle and SEP2.