In June 2023, we achieved a BitSight Security Rating of 790 (advanced), which places Endava in the 90th percentile in our industry. All our people must complete security awareness training annually. We also conduct simulation-based testing to help Endavans recognise and report potentially malicious communications.
We have successfully completed the 2023 SOC2 (Service Organization Controls 2) Type 2 attestation for software development and managed by Endava services.
System and Organization Controls (SOC) 2 is a comprehensive reporting framework put forth by the American Institute of Certified Public Accountants (AICPA). in which Iindependent, third-party auditors carry out an assessment and subsequent testing of controls relating to the Trust Services Criteria (TSC) of security, availability, processing integrity, confidentiality and privacy.
We continue to expand the certification of our Information Security Management System (ISMS) to ISO 27001 for all our delivery locations. In December 2022, we applied for and received a Trusted Information Security Assessment Exchange (TISAX) certification for one of our offices in Germany.
Our intelligent Quality Management System (QMS) is certified to ISO 9001 and our quality assurance process is incorporated into our delivery. Every part of The Endava Adaptive Model (TEAM) is verified against our QMS processes and procedures as well as customer specifications.
Our privacy team in our legal department is responsible for implementing data privacy rules and regulations. To raise awareness on data privacy compliance issues, we have nominated data champions with regional and business specific expertise to work directly with the privacy team.
