As marine operations become increasingly digital, protecting information is as important as protecting physical assets. Survey Association manages sensitive operational, survey, claims, and project information across a growing ecosystem of digital platforms and services.
We are committed to maintaining high standards of information security, data protection, and cyber resilience to help ensure that client information remains secure, accessible, and protected throughout its lifecycle.
Our approach combines internationally recognised information security standards, robust internal controls, and continuous monitoring to support the secure delivery of our services.
ISO 27001
Survey Association is certified to ISO/IEC 27001:2022 information security management system, the internationally recognised standard for information security management.
This framework supports the identification, assessment, and management of information security risks across our organisation, helping ensure that appropriate controls are implemented to protect information, systems, and services.
Through continuous review and improvement, we work to maintain a resilient and secure operating environment for both our clients and our business.
Our cyber resilience programme also reflects the increasing security expectations placed on organisations supporting critical infrastructure and essential industries. We maintain policies, controls, and governance processes aligned with applicable regulatory requirements, including the principles of the EU NIS2 Directive, helping strengthen operational resilience and the protection of critical information and services.
Our digital ecosystem supports the management of marine surveys, cargo claims, remote inspections, reporting, and operational data across global operations. Through platforms such as SA Instruct, SA Remote, Galleon, and SA Cargo, clients rely on us to handle sensitive commercial, technical, and operational information every day.
Protecting this information is a fundamental responsibility. We apply structured controls and governance processes across our survey, claims, reporting, and insight activities to help ensure information remains secure, confidential, and accessible only to authorised parties.
As our digital services continue to evolve, information security remains a core consideration throughout platform development, system management, and operational delivery.
We apply a range of organisational and technical controls to help safeguard information and maintain system integrity.
These include:
Our objective is to ensure that information is available to authorised users when needed while remaining protected from unauthorised access, loss, or misuse.
Our approach is supported through clearly defined governance, policies, and responsibilities across the organisation.
We continuously review our controls, procedures, and operating practices to help ensure compliance with relevant legal, regulatory, contractual, and industry requirements.
As an independent organisation, we recognise the importance of maintaining the trust placed in us by clients, insurers, operators, and project stakeholders worldwide.
Cyber resilience is not a one-time achievement. It requires continuous attention, adaptation, and improvement.
As our services and digital platforms continue to evolve, we remain committed to strengthening our security posture, protecting client information, and maintaining the reliability and integrity of the services we deliver.
By combining technical expertise, robust governance, and internationally recognised standards, we help ensure that our clients can rely on both our people and our technology.