To ensure that these requirements are being met, The
Adjudicator commissioned an independent audit of the ISS.
The attached document sets out the audit programme and
results in full; however the Executive Summary from the
report is below.
The evidence presented by Arqiva and the tests and
interviews undertaken by the representative of the
Adjudicator demonstrated that Arqiva are compliant with
the protocols and measures stated within the published
Information Security Strategy document and that no
material deviation was evident. The evidence produced by
Arqiva also demonstrates that the protocols and measures
stated in the Undertakings have been satisfactorily
implemented by Arqiva. The audit tests have established
that these measures are operating satisfactorily.
The representative of the Adjudicator makes two
observations for consideration:
Since the ISS document was published the
protocols and measures referenced in the ISS document
have been put into practise and in some cases further
developed. It is recommended that either the ISS
document is updated to reflect current practises or a
separate document is produced which describes these
practises.
That tests related to the protocols and measures
are documented and that the results of these tests are
recorded.
The Adjudicator considers both the audit and Arqiva’s
performance to be satisfactory and intends to repeat the
audit in 2013, or sooner if considered necessary.