Standards and certifications

The ISMS enables us to effectively address information security risks and ensures that our security arrangements keep up with everchanging security threats, vulnerabilities and business impacts that our company faces. We require ISO certification for ourselves and for our data center partners as proof of adherence to strict controls and processes.

There are two types of Service Auditor's Reports: Type 1 and Type 2. A Type 1 report describes the company’s description of controls at a specific point in time. A Type 2 report not only includes the company’s description of controls, but also detailed testing of the company’s controls over a minimum six-month period. At Tungsten Network, we have committed to conducting an ISAE 3402 Type 2 audit every year. If you are a customer or a third party with an existing non-disclosure agreement, you can ask your contact at Tungsten Network for a copy of this report.

It is a mandatory accreditation for suppliers of UK Government contracts that involve handling personal information and providing certain ICT products and services. Cyber Essentials enables Tungsten Network to be compliant with the PEPPOL framework.

It shows that we validate against all local indirect tax and commercial legislation in real-time. The trust mark also shows that our adherence to good practices has been successfully reviewed by TrustWeaver’s experts. Only service providers that have completed the programme can display the TrustWeaver-Verified trust mark on their websites and documentation.

The programme requires us to self-certify and supply evidence against the 14 Cloud Security Principles of G-Cloud as part of the G-Cloud Framework on-boarding process quality checks. Any suppliers found maliciously in breach of their assertions can, following investigation by the G-Cloud Authority, be disqualified from the G-Cloud Framework.

We are compliant to the 14 Cloud Security Principles of G-Cloud and have passed the on-boarding process. 14 Cloud Security Principles is available here. Details of our listing in the Digital Marketplace are here.

PEPPOL offers a standardised network connection for electronic ordering, invoicing and shipping.

PEPPOL also enables access to its network through accredited ‘Access Points’. Access Points connect users to the PEPPOL network and exchange electronic documents based on the PEPPOL specifications. Buyers and suppliers are free to choose their preferred single Access Point provider to connect to all PEPPOL participants already on the network. (‘Connect once, connect to all’).

Tungsten Network has been through the accreditation process to ensure we comply with PEPPOL specifications and has been certified as a Certified PEPPOL Access Point.