01
ISO 27001
Information Security Management
Working Towards
Our security practices are being designed to follow ISO 27001, including formal risk assessment, documented controls and ongoing governance for protecting client data and systems.
About Athenon / Trust & assurance
Trust Centre
Security, quality and transparency.
All in one place.
You trust us with your infrastructure, your data and your people. Here’s how we’re building that trust — our standards, our commitments and the people you can turn to.
Our certification roadmap ISO 27001 ISO 9001 Cyber Essentials Plus
Certifications & frameworks
Recognised standards. A clear roadmap.
We are building our operations around recognised security and quality standards. Here’s an honest view of where we are today, and where we’re heading.
Our current status: Athenon has not yet obtained formal certifications. These are our development goals, not certification claims. Certificate downloads will be added when certifications are achieved.
02
ISO 9001
Quality Management
Working Towards
We are structuring our delivery processes around ISO 9001 principles of continual improvement, documented procedures and measurable service quality.
03
Cyber Essentials Plus
Technical Security Controls
Working Towards
We are implementing the technical and procedural controls required, focusing on secure configuration, access control, malware protection and patch management.
04
GDPR / UK GDPR
Data Protection & Privacy
Working Towards
We maintain data protection practices in line with GDPR and UK GDPR requirements to safeguard client and employee information.
05
NIS2 Readiness
Regulatory Readiness
Aligning
We are aligning our approach with risk management, incident reporting and supply-chain security requirements to help support affected clients.
06
NIST Framework
Security Governance
Aligning
We align our risk management approach with NIST principles for comprehensive security governance.
07
CREST-aligned Services
Security Testing & Assessment
Planned
As our capabilities mature, we intend to align our methodologies with CREST expectations for penetration testing and security assessment.
08
SOC 2
Security, Availability & Confidentiality
Long-term Goal
Our internal control framework is being shaped with SOC 2 in mind so that we can evidence this assurance as we grow.
Our commitments
How we protect your business
Information security
We are building our security practices around ISO 27001 principles: identifying risk, documenting controls and developing governance to protect client data and systems.
Service quality
Consistent delivery starts with good process. Our ISO 9001 roadmap focuses on documented procedures, measurable service quality and continual improvement.
Data protection
We are committed to protecting personal data in line with UK GDPR and the Data Protection Act 2018. Where we act as a processor, we work under agreed data processing terms.
Policy & governance
Quality & information security
Good governance is a foundation, not a finishing touch. These principles reflect our existing service terms and our security and quality roadmap.
Our certification journey is ongoing. This summary does not represent a certified management system or a signed ISO policy.
Request policy documentationOur operating principles
- Deliver services with reasonable skill and care, consistent with good industry practice.
- Protect confidential information and use it only for agreed purposes.
- Comply with applicable legal, regulatory and contractual requirements.
- Build risk assessment and documented controls into our security practices.
- Maintain appropriate technical and organisational measures to protect personal data.
- Develop documented procedures and measurable service quality.
- Agree data processing terms where we process personal data on your behalf.
- Continually improve our processes as our services and operations mature.
Sub-processors & hosting
Your data. The right questions.
Your providers, hosting locations and safeguards depend on the services you use. Request the information relevant to your agreement from our data protection contact.
Data locations
Confirm where your data is hosted, accessed and processed for each service.
Providers & safeguards
Request the relevant sub-processor details and applicable data processing or transfer safeguards.
Data processing terms
Discuss your Data Processing Agreement and any requirements specific to your organisation.
Security FAQ
Questions procurement teams ask us
Straightforward answers to help you understand our approach to security, privacy and assurance.
Let’s talk assurance
Need something specific?
Security information, vendor assessments, data processing agreements or a privacy question. Start with the right contact.
Athenon · Trust & transparency