Security & Compliance

mutherboard.com is Cyber Essentials certified

Cyber Essentials is the UK Government-backed scheme, run by the National Cyber Security Centre, that sets a baseline for protecting an organisation against the most common internet-borne attacks. Certification is independently assessed and has to be renewed every year, so the badge above is live: it is served from the certification registry and reflects our current status.

What it covers

Five technical controls, applied across every device and account we use to do our work.

• Firewalls. Boundary firewalls and internet gateways on every network and device we work from.
• Secure configuration. Default passwords removed, unnecessary software and accounts switched off, devices locked down.
• Access control. Named user accounts, least privilege, and multi-factor authentication on our cloud services.
• Malware protection. Anti-malware on every device, with only approved software installed.
• Security updates. Operating systems and software kept in support and patched promptly when fixes are released.

What it means for you

• An independent, annually renewed check that the people with access to your monday.com workspace and your data follow a recognised security baseline.
• Protection against the attack types that cause most incidents: phishing, malware, credential theft and unpatched software.
• A supplier you can put through procurement. Cyber Essentials is a condition of many UK public sector contracts and a standard question on security questionnaires.

How we handle data and cyber security as an organisation

• We work inside your monday.com, Make and connected accounts under named user access that you grant and can revoke. Your data stays in your systems; we do not take copies to build with.
• Enquiries made through this website are stored in our own database, hosted in London, and in our monday.com CRM, and are used only for the purpose you gave them. Retention and your rights are set out in our Privacy Policy.
• Access to client systems and to our own is limited to the people working on your engagement and is removed when the engagement ends.
• Every device we work from is covered by the five Cyber Essentials controls above, and we re-certify every year.
• We are registered with the UK Information Commissioner's Office and process personal data under UK GDPR.

Questions about our security or a supplier questionnaire to complete? Get in touch.