SWISO Policy Centre

Southwest ISO Systems processes account, contact, contractual, service and security information for defined business purposes. Personal data must be adequate, relevant, limited, accurate, protected and retained only for the approved period. Data-subject requests, incidents and processor arrangements are handled through controlled governance procedures.

Services are supplied business-to-business against an accepted quotation, confirmed scope and agreed deliverables. Unless otherwise agreed in writing, invoices are due 30 days from invoice date. Client responsibilities include timely access, accurate information, authorised decisions and lawful evidence sharing. Consultancy, internal audit, training and readiness support do not guarantee accredited certification.

SWISO prohibits slavery, forced labour, trafficking and exploitative labour practices in its operations and supply chain. Relevant providers are assessed proportionately, concerns may be raised without retaliation, and suspected breaches are investigated and escalated.

AI is used for controlled assistance, drafting, classification and analysis. Users must use authorised data, verify sources, protect confidential information and obtain competent human approval. AI must not independently make legal, employment, conformity, accreditation or certification decisions.

Information is classified, stored in approved locations, shared on least-privilege terms and disposed of under retention rules. Client-controlled source files remain in approved client or SWISO repositories; central records retain only necessary metadata, decisions and audit evidence.

SWISO commits to protecting the environment, meeting applicable compliance obligations, preventing pollution where relevant, using resources efficiently and improving environmental performance through objectives, monitoring and review.

SWISO protects confidentiality, integrity and availability through risk-based controls, access management, secure configuration, supplier oversight, incident response, continuity arrangements and continual improvement.

SWISO provides safe and healthy working conditions, eliminates hazards and reduces occupational health and safety risks, consults workers, meets applicable requirements and improves its arrangements.

SWISO identifies priority activities, disruption risks, dependencies and recovery needs; maintains proportionate response and recovery arrangements; exercises those arrangements; and improves them following tests, incidents and change.