Independently audited
Bureau Veritas audited ISS’s cybersecurity against the Cyber Trust (2025) Promoter requirements.
Cybersecurity
Cybersecurity for your business, from a Cyber Trust certified provider
ISS holds the Cyber Security Agency of Singapore’s Cyber Trust mark (Promoter tier) for its IT and network security services. We can also help you protect your own systems.
Our certification
What the Cyber Trust mark means
The Cyber Trust mark is the Cyber Security Agency of Singapore’s cybersecurity certification for organisations. An independent certification body assesses the cybersecurity measures an organisation has in place, within a stated scope.
Defined scope
The certificate covers the provision of IT and network security services (classical cybersecurity pillar). It does not cover systems or services outside that scope.
About us, not your systems
The mark relates to ISS’s own cybersecurity. It does not certify or guarantee the security of your systems or data.
Protect your business
Four layers of protection
From the edge of your network to the front door of your office, all handled by one team.
01Help keep threats out
Firewalls and network security
Help stop threats at the edge of your network, with equipment we supply, set up and support.
- Firewalls
- Routers and switches
- Internet connections
02Help block malware and spam
Antivirus and anti-spam
Help keep viruses off your servers and PCs, and filter junk mail before it reaches your staff.
- Virus updates
- Quarterly full scans
- Anti-spam gateway
03Recover your data
Backup and replication
A copy of your data is kept away from the office, so you can recover if something goes wrong.
- Off-site replication
- Veeam, Acronis, StorageCraft
- GFI email archiving
04Find weaknesses before attackers do
VAPT (Vulnerability Assessment and Penetration Testing)
Vulnerability assessment and penetration testing, to find and fix security weaknesses before someone else finds them.
- Vulnerability scanning
- Penetration testing
- Findings report
Not sure where to start? Tell us about your setup and we’ll recommend what to put in place first.
How we handle your data
Our commitments when we work in your systems
When we install, maintain, back up, host or support your IT, we may be able to see personal data stored in those systems, such as staff emails, files or CCTV footage. Where we process it for you under a written contract, this is how we treat it.
- Only what the job needsWe access only what the job requires, keep it confidential, take reasonable security measures to protect it, and don’t use it for our own purposes.
- On your behalf, on your instructionsWe process personal data only on the customer’s behalf and on its instructions, under a written contract. The customer remains responsible for it under the PDPA. We keep our own PDPA duties to protect the data, not keep it longer than needed, and tell the customer about breaches.
- Told without undue delayWe tell the customer without undue delay once we have credible grounds to believe a data breach has occurred in data we process for it. The customer then decides whether it must notify the PDPC and affected individuals.
- Returned or deletedWe stop keeping the data once the work no longer needs it, and return or delete it as agreed in the contract, unless the law requires us to keep it.
Office hours: Mon to Fri, 9am to 6pm
Tell us what you need.
Share how your office runs today. We’ll recommend the right setup and send you a quote, then one team handles it from start to finish.
- Cyber Trust certified
- In IT since 1996
- SMEs to government bodies