OCM takes information security seriously
October 3, 2023
Tik Tok was issued fine of £12.7 million in April 2023. This was for a number of breaches of UK data protection law. One of the key findings from the ICO was Tik Tok’s failure to ensure that the personal data of its users was processed lawfully, fairly and in a transparent manner[1].
Data erasure
Data erasure is classed as processing data. OCM have numerous procedures and policies in place to ensure the information we receive is stored securely prior to the erasing process.
We have stringent data wiping procedures in-house and have an ISO 27001 Information Security Management System. It is one of the most widely recognised information security standards in the world. In addition certification to ISO 27001 demonstrates to customers, partners and other stakeholders that an organisation is committed to protecting its information assets.
Blancco and Certus partners
To make sure sensitive data is securely erased with no risk of recovery, OCM partners with Blancco and Certus. Both partners are Common Criteria certified. This is an international standard that’s governed by 31 countries including the UK through the National Cyber Security Centre (NCSC). This is the UK Government’s National Technical Authority for Information Assurance. Both Blancco and Certus boast numerous other internationally recognised accreditations. These include NATO Information Assurance Product Catalogue and ADISA.
Both solutions are optimised for the highest and most widely recognised data erasure standard: NIST 800-88r1 Purge and Clear. Although we do recommend to follow this standard, we do also offer data erasure according to the old HMG InfoSec Standard No. 5 standard too.
For more information please see our dedicated data erasure page.
[1] https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2023/04/ico-fines-tiktok-127-million-for-misusing-children-s-data/
