Security events are operational events.
Our incident framework covers identification, triage, containment, investigation, eradication, recovery, customer communication and post-incident improvement. Security contacts can use support@gatecode.co.uk.
1. Identify and triage
Authentication anomalies, verification abuse, administrative events, infrastructure errors and customer reports are assessed for severity, affected customers, data exposure and operational impact.
2. Contain
Containment may include disabling affected functionality, pausing new registration or GateCode issuance through central controls, revoking sessions, rotating credentials, blocking abusive traffic or isolating affected infrastructure.
3. Investigate and eradicate
GateCode reviews relevant security, audit and application events, identifies the root cause, removes malicious access, patches vulnerable code or configuration and validates that the remediation closes the identified path.
4. Notify and communicate
Where a personal-data breach is likely to create a regulatory reporting obligation, GateCode and the relevant controller assess notification requirements promptly. Where GateCode is the controller and a report to the UK Information Commissioner is required, the aim is to report without undue delay and, where feasible, within 72 hours of awareness. Where GateCode acts as processor, affected controllers are notified without undue delay with available information to support their own assessment.
5. Recover and verify
Services are restored in a controlled way, key workflows are tested, monitoring is increased where appropriate and affected credentials or sessions are invalidated where needed.
6. Learn and improve
Material incidents receive a post-incident review covering timeline, root cause, impact, response quality, corrective actions and any product or operational improvements needed to reduce recurrence.