printer friendly version

Gallagher achieves SOC2 Type 2 certification

Gallagher Security Global General Manager, Mark Junge, and Value Stream Lead, Guy Irvine.

Gallagher announced it has achieved System and Organization Controls (SOC2 Type 2) certification for the cloud-hosted services of its flagship security solution, Command Centre.

The compliance standard for service organisations provides reassurance at the highest level that client data is securely processed and stored by Gallagher. Maintained by the American Institute of Certified Public Accountants (AICPA), it demonstrates stringent internal controls for information security and privacy.

The SOC2 Type 2 certification rounds out a suite of standards and certifications achieved by Gallagher Security, including ISO27001, CAPSS 2021 and EN50131-4. Mark Junge, Global General Manager, says the company welcomed the opportunity to undergo an external audit as part of the certification process:

“Any business with cloud-hosted solutions that is serious about their data protection and privacy measures should be prepared to undergo this type of scrutiny,” Junge says. “At Gallagher, our customers place a huge amount of trust in our people, and our security solutions; the onus is on us to demonstrate we are worthy of this trust.”

SOC2 Type 2 certification also lays the foundation for the imminent move of Gallagher’s Command Centre from an on-premise to cloud-based solution. Guy Irvine, who is leading this development for Gallagher Security says, “This certification is evidence that the future of our enterprise security solution has cyber security and data ethics at its core.”

There are five principles in the SOC 2 framework: Security, Availability, Processing Integrity, Confidentiality, and Privacy. A business can be audited against any combination of these principles. During the audit process, all systems are reviewed by a trusted external third party to ensure they comply with the AICPA trust principles. This audit captures how a company safeguards customer data and counters the risk of cyber-attacks.

Share this article:

Further reading: