Skip to main content
Xoxoday maintains a documented patch management policy aligned with ISO 27001 controls.
Xoxoday maintains a documented patch management policy aligned with ISO 27001 controls. The policy covers: (a) regular assessment of systems and applications for available patches across OS, application, database, and network layers; (b) timely installation of security patches based on criticality, with critical patches assessed within 72 hours; (c) testing prior to deployment in non-production environments to validate effectiveness; (d) rollback plans as part of the change management procedure; (e) documentation of applied patches for compliance and auditing; (f) formal authorization and approval from management; and (g) stakeholder communication prior to deployment as part of the change management process. Learn more: Xoxoday Help Centre — Technical requirement

Does Xoxoday integrate security into its product lifecycle?

Yes. Xoxoday embeds security at every stage of product development through a formal Secure SDLC, from design and coding to testing and monitoring…

Does Xoxoday cooperate with security audits and inspections?

Xoxoday fully cooperates with security inspections and audits by clients or independent assessors, providing timely access to documentation and…