A documented, organization-wide risk management program is maintained as part of the ISO 27001 ISMS. The program includes a corporate risk management framework with policies aligned to ISMS and GDPR requirements, validated by SOC 2 Type II audits.
Does Xoxoday have an information security awareness program?
Xoxoday runs a formal security awareness program with mandatory training, phishing simulations, and annual policy acknowledgments aligned to ISO…
Does Xoxoday have physical security controls in place?
Yes. Xoxoday maintains comprehensive physical security controls and policies protecting its infrastructure, data centres, and customer data…