The relationship between the DaSH Steering Committee and wider Research Governance structures both locally and nationally demonstrates the wider regulatory and compliance context that DaSH operates within. Information Security requirements are one aspect of this environment; compliance with research ethics and data protection legislation are also necessary.
Audits
In addition to accreditation through the , DaSH maintains independent ISO 27001 certification. ISO 27001 is the internationally recognised standard for Information Security Management Systems (ISMS). Certification demonstrates that DaSH has implemented a robust framework to manage information security risks and operates in accordance with established best practices for the continual improvement of its ISMS.
DaSH has held ISO 27001 certification since 2019 and successfully maintains certification through a programme of regular external surveillance audits and periodic recertification assessments. In addition, DaSH undertakes annual internal audits against ISO 27001 standards, providing independent assurance alongside external audit activity.