Security
Keeping your site data secure — under an information security management system certified to ISO/IEC 27001:2022.
Certified to ISO/IEC 27001:2022
Listo has proudly achieved NQA certification to ISO 27001:2022 Information Security Management, for the protection of data stored, processed and transmitted by its AGAD Portal industrial cloud monitoring system.
- Certified by NQA, a UKAS-accredited certification body
- The AGAD Portal platform itself is in scope — not just the office
- Audited by an independent third party, and re-audited on a regular cycle
- Your data can stay on your own servers if your policy requires it
Information Security Management — certified by NQA. Scope: the protection of data stored, processed and transmitted by the AGAD Portal industrial cloud monitoring system.
What ISO/IEC 27001 means for you
In today’s digital age, keeping sensitive information secure is essential. ISO/IEC 27001:2022 is the international standard for Information Security Management Systems (ISMS), providing a clear framework to safeguard against security threats. Implementing the standard improves operational efficiency, reduces risk and enhances customer trust.
Why ISO 27001 matters
Security breaches can lead to serious financial and reputational damage. ISO 27001 certification demonstrates that an organisation proactively manages risk through a robust ISMS — a commitment to security for both the organisation and its customers.
Operational efficiency
ISO 27001 fosters a security-first mindset, leading to consistent and effective risk-management practices across the whole business, from development to support.
Independent assurance
Certification is not a self-declaration. Our ISMS was audited by NQA and is re-audited to keep the certificate, so the assurance you rely on is checked by someone other than us.
How we protect AGAD Portal data
Placing plant data in the cloud raises understandable questions. Under our ISMS, Listo applies documented controls covering access management, encryption in transit, backup and recovery, supplier management, change control and incident response for the AGAD Portal service. Customers who need to keep data in-house can run the platform on their own servers.
If you need a copy of our certificate, our statement of applicability summary or a security questionnaire completed for your procurement process, please contact us.
Questions about data security?
We are happy to walk your IT or compliance team through how the AGAD Portal is protected.