Skip to content

ISO 9001:2015 and ISO 27001:2022, clause 5.2

Quality and Information Security Policy

How we commit to high-quality service, protect company and customer information, and keep improving our integrated management system.

Our commitment

Quality in everything we do is integral to IntelisenseIT's working practices and long-term sustainability. We commit to consistently high standards in Microsoft consulting, implementation, data and analytics, and managed support services; meeting customer, contractual, statutory and regulatory requirements; protecting the confidentiality, integrity and availability of company and customer information; and continually improving our integrated management system.

This policy provides the framework for measurable quality and information security objectives.

Leadership

Amjid Khan, Managing Director, is accountable for the integrated management system, policy approval and adequate resources. Usayd Javed (ujaved@intelisenseit.com) owns information security. Zain Javed, Quality Officer, coordinates quality improvement, quality risks and awareness.

Engagement of people

We value every employee, treat people with dignity and respect, support engagement and development, and ensure that personnel understand their responsibilities and are trained for their roles. Everyone shares responsibility for high-quality service and information protection.

Process approach

We plan and control connected processes from requirements analysis through design, Microsoft platform configuration, testing, deployment and support, with defined responsibilities, acceptance criteria and customer feedback.

Improvement

We maintain continual improvement through measurable objectives, risk assessments, monitoring, customer feedback, audit findings, corrective actions and lessons from security incidents.

Evidence-based decision making

We measure process and service performance and use reliable evidence to identify problems, assess threats and determine effective improvements.

Relationship management

We evaluate suppliers and partners against quality, security, contractual and service requirements and monitor their performance according to risk.

Interested parties and security controls

We identify relevant interested parties and their needs, including data protection assurance and agreed service levels. Security controls include risk-based access, encryption, endpoint and network protection, training and incident response. We review changing threats, technology, legislation and business requirements.

Our quality and information security objectives and measurement arrangements are recorded in our objectives register. Security objectives are set annually and monitored through management reviews.

Communication and authorisation

This policy is communicated to employees and contractors through induction, awareness activities and controlled SharePoint information, and is available to customers and other interested parties through the company website and on request.

Authorised by Amjid Khan, Managing Director (akhan@intelisenseit.com).