Storm Group’s Statement of Applicability (SoA) outlines the information security controls we have implemented in line with the ISO/IEC 27001 standard. It defines which controls are applicable to our organisation and how they are used to manage information security risks effectively.
The SoA provides transparency around our security approach and demonstrates our commitment to protecting data, systems, and services across Storm Group.
Statement of Applicability
Storm's company policies and statements set out the standards and principles that guide how we operate across the business. They cover key areas such as information security, data protection, health and safety, environmental responsibility, and ethical conduct, ensuring consistency, compliance, and best practice across all teams.
These policies demonstrate our commitment to operating responsibly, protecting our people and customers, and maintaining trust in everything we do.
Storm Group uses the Risk Ledger Trust Centre to provide transparency into our security, compliance, and risk management practices. Through Risk Ledger, customers and partners can access up‑to‑date information on our security controls, certifications, and policies in one trusted location.
This approach supports secure collaboration, reduces onboarding friction, and demonstrates our ongoing commitment to maintaining high standards of information security and risk management.