Security Centre

1. Information Security

We maintain documented information security and cybersecurity policies that govern how client information is collected, processed, stored, and protected across our business.

Our security programme includes:

• Secure cloud-based document storage
• Role-based access controls
• Multi-factor authentication (MFA) for staff accounts
• Strong password and identity management policies
• Device security and endpoint protection
• Encryption of data in transit and, where supported by our service providers, at rest

2. Privacy & Data Protection

We are committed to handling personal information responsibly and in accordance with the requirements of the Protection of Personal Information Act (POPIA).

Our privacy programme includes:

• Collection of only the information necessary to deliver our services
• Secure processing and storage of personal information
• Restricted access to authorised personnel
• Confidential handling of client records
• Defined data retention and disposal practices

3. Business Continuity

To minimise disruption and protect client information, we maintain:

• Regular automated backups
• Disaster recovery procedures
• Secure cloud infrastructure
• Business continuity processes designed to support the ongoing delivery of our services

4. Confidentiality

Protecting client confidentiality is a professional obligation and a core value of our firm.

All employees and contractors are subject to confidentiality obligations and are expected to follow our internal information security policies when handling client information.

5. Security Awareness

Our team receives ongoing guidance on information security, phishing awareness, password security, and responsible handling of confidential information.

6. Responsible Disclosure

If you believe you have identified a security vulnerability affecting Dyantyi Chartered, we encourage responsible disclosure. Please contact our security team so we can investigate and resolve the issue promptly.