Issuer Portal Security Protocols

Overview 

At Issuer Portal, we are dedicated to building trust through robust security, privacy, and reliability in our platform. Our Trust Center is designed to provide complete transparency into how we protect your data and ensure seamless, secure operations for users of this portal. By adhering to industry-leading standards, implementing stringent security protocols, and maintaining clear data governance policies, Issuer Portal empowers users to retrieve reports and shareholding details confidently. The Trust Center outlines our commitment to safeguarding your information, ensuring compliance, and fostering a trusted environment for users of this portal.

TABLE OF CONTENTS

• What are the certifications of Issuer Portal?  
• What is the Encryption Method? 
• What is Security Testing & Risk Management?
•  Penetration Testing and Vulnerability Management 
• What is Backup Policy?
• What are Issuer Portal Incident Response Plan? 

What are the certifications of Issuer Portal?  

Security Certifications at Issuer Portal 

At Issuer Portal, we prioritize the security, integrity, and compliance of your data.

Our Certifications 

The infrastructure and data centre services of Issuer Portal is covered under ISO/IEC 27001. This certification is renewed continuously. 

The most recent certification was issued in 2023. 

What is the Encryption Method? 

Data Encryption at Issuer Portal 

At Issuer Portal, safeguarding your data is a top priority. Our platform, hosted on Microsoft Azure infrastructure, employs robust encryption methods to protect information, ensuring your data remains secure throughout its lifecycle. 

What is Security Testing & Risk Management?

 
Penetration Testing and Vulnerability Management 

Issuer Portal conducts annual third-party penetration testing to assess and strengthen the security of our platform and supporting infrastructure. These assessments are performed by independent security experts using industry-standard methodologies. 

 
All critical and high-risk findings are addressed immediately upon discovery. Medium vulnerabilities are tracked and resolved as part of our regular release cycles within the same calendar year. We document all findings and remediation steps to ensure full traceability and follow-through. Summary reports are available upon request under a non-disclosure agreement.

What is Backup Policy? 

All databases on server are backup based on Business Continuity Plan.   

These backups require no manual intervention and are automatically managed, monitored, and retained. 

What are Issuer Portal Incident Response Plan? 

Disaster Recovery at Issuer Portal 

At Issuer Portal, we are committed to ensuring the continuity and security of your operations. Our comprehensive Disaster Recovery (DR) Plan is designed to minimize downtime and data loss in the event of an unplanned incident, enabling rapid restoration of services. 

Disaster Recovery Plan 

Our DR Plan outlines well-defined procedures for recovering critical systems and data. Two key metrics guide our response: 

• Recovery Time Objective (RTO): The maximum acceptable downtime for systems, applications, or networks. 
• Recovery Point Objective (RPO): The maximum acceptable period of data loss during an incident.

The DR scope includes restoration of both our Azure-hosted platform and database, ensuring end-to-end service continuity. 

We’re committed to maintaining your trust through transparency and robust security practices. If you have any questions or need further assistance, please raise a ticket, and our support team will respond as soon as possible.