Skip to main content
Yes. Risk assessments are conducted for all in-scope applications as part of Xoxoday’s ISO 27001:2022 certified Information Security Management System (ISMS). Risk assessment covers asset identification, threat and vulnerability analysis, likelihood and impact evaluation, and risk treatment planning.
Yes. Risk assessments are conducted for all in-scope applications as part of Xoxoday’s ISO 27001:2022 certified Information Security Management System (ISMS). Risk assessment covers asset identification, threat and vulnerability analysis, likelihood and impact evaluation, and risk treatment planning. For third-party vendor engagements, risk assessments are conducted based on ISO 27001 standards both during onboarding and periodically according to risk classification. Cybersecurity exceptions, including formal risk assessments, are documented and approved by the Information Security team when a system or process cannot fully meet a security requirement. Learn more: Empuls Help Centre

Is Xoxoday Empuls ISO 27001 and SOC 2 Certified?

Xoxoday Empuls holds ISO/IEC 27001 certification and SOC 2 Type II attestation, confirming enterprise-grade information security management controls.

Does Xoxoday Empuls have a formal IT risk management process?

Xoxoday Empuls follows an ISO 27001–aligned process to track, mitigate, or formally accept IT risks identified through audits, assessments, and…