Digital Transit Limited, a leading AI-focused company, recently took part in the Secure Innovation Security Review Pilot Scheme, a joint initiative by the National Protective Security Authority (NPSA) and the National Cyber Security Centre (NCSC). This comprehensive review was conducted by Atkins Realis.
Comprehensive Security Assessment by Experts
The assessment evaluated Digital Transit Limited’s preparedness against a variety of security threats, including insider threats, cyber vulnerabilities, and physical security. Key findings from the review highlighted the following strengths:
- Comprehensive Security Policies: Robust policies are in place to manage security effectively.
- Strong Security Culture: A proactive approach to security permeates the company.
- Cyber Security Management: The company excels ensuring automatic software updates, firewalls, and two-step verification are implemented.
Areas for Improvement and Action Plan
Despite these strengths, the review identified areas needing enhancement, which have been promptly incorporated into the Quality Manual:
- Dedicated Security Lead: The review suggested nominating a committed security lead to ensure all protocols are followed.
- Proactive Monitoring: The review also suggested implementing logging and protective monitoring, developing a Cyber Incident Response Plan, and considering cyber insurance.
Strengthening Partnerships and Security Protocols
The review also addressed secure partnerships, recommending that Digital Transit Limited ensure future partners handle information securely and include security clauses in contracts. These recommendations have been taken on board as part of our continuous improvement efforts.
Commitment to Long-term Security and Success
Digital Transit Limited’s participation in this security review underscores their commitment to safeguarding their business. By addressing the identified improvements, they are set to enhance their security defences, protect valuable assets, and secure a competitive edge in the tech industry.
Acknowledgements
We extend our gratitude to Atkins Realis for their professional assessment, and to the National Protective Security Authority (NPSA), the National Cyber Security Centre (NCSC), and Innovate UK for their support and funding.
