Security & compliance

ISO 27001

ISO 27001 is the international standard for information-security management systems (ISMS), specifying how an organisation should manage the confidentiality, integrity and availability of information.

ISO 27001 is the international standard for information-security management systems (ISMS), specifying how an organisation should manage the confidentiality, integrity and availability of information. It defines controls for access management, change management, vendor risk, incident response, risk assessment and continual improvement.

At Aura Vision

Aura Vision’s policies and operational controls follow the ISO 27001 framework. A documented ISMS covers access control, change management, vendor management, incident response and risk assessment; all staff complete information-security training during onboarding and annually thereafter; and the platform is subject to annual external penetration testing.

Formal ISO 27001 certification audit is planned as part of the compliance roadmap. The ISMS itself is reviewed by leadership quarterly and updated whenever policies, suppliers or risk surface area change.