Incident Response Policy

We monitor our systems continuously. Alerts, reports from staff or clients, or automated checks can flag a potential incident. Once flagged, our team assesses whether it's a real security event.

We investigate to understand the scope, impact and cause. This includes identifying affected systems and data, and preserving evidence where needed.

We act quickly to limit the impact by isolating affected systems, revoking access where needed and preventing the incident from spreading.

We restore affected services from secure backups, verify integrity and bring systems back online safely, with extra monitoring in place.

If an incident affects your data, we notify you without undue delay with clear details and any steps you need to take, in line with UK GDPR.

Where required, we notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of a notifiable personal data breach, and support you with your own duties.

After every incident we run a review to learn from it. We document what happened, what we changed and how we'll prevent it happening again.

If you believe there's a security issue affecting your SwiftManage account, contact us immediately at help@swiftmanage.co.uk.

Our team will acknowledge your report and start the process above. We'll keep you updated throughout.