Risk management overview

Peak Signal employs a proactive Risk Management Framework designed to safeguard the Confidentiality, Integrity, and Availability (CIA) of our systems, dashboard tools, and client data. We follow a structured, ongoing four-stage process:

• 1. Identification: We continuously monitor for potential vulnerabilities within our cloud hosting, codebases, and third-party dependencies, alongside tracking evolving external cyber threats.

• 2. Analysis: Identified risks are evaluated and scored based on Likelihood and Impact. This creates a clear priority matrix so we focus our resources on the most severe threats first.

• 3. Mitigation & Resilience: We address risks using technical controls (such as Multi-Factor Authentication, encryption, and rapid patching) and by utilizing secure, compliant cloud infrastructure. Crucially, to mitigate the impact of unforeseen risks, we maintain a comprehensive Business Continuity Plan (BCP) – that is updated annually – which incorporates dedicated incident management elements to rapidly handle and recover from operational disruptions.

• 4. Continuous Review: Our risk profile, active security controls, and business continuity strategies are formally reviewed by the Peak Signal Management Team at least annually, or immediately following any major software or infrastructure changes.