A Trust Centre on every site, generated from the policies themselves
Every company website in the group now has a Trust Centre showing its security policy set and an honest certification status, built from the same documents the policies live in.
What I tried
Buyers and procurement teams ask for proof of security policies before they buy. A page written by hand drifts from the documents it describes.
Why I chose differently
The group is preparing for ISO 27001, where an auditor checks the documents against what is actually running. Any page about them has to stay as true as they are.
What I chose
Each site's Trust Centre is generated from the company documents repository, so the page changes when a policy does. It says plainly that we are preparing for certification rather than certified, links the public policies and offers the full pack under NDA. The same day, the Verus legal pages were updated as soon as new call relay regions went live, because policies follow the technology.
The principle
Generate the claim from the evidence, never the other way round.
- ISO 27001
- Security
- Compliance
- Trust Centre