The Security Development Lifecycle (SDL) consists of a set of practices that support security assurance and compliance requirements. The SDL helps developers build more secure software by reducing the number and severity of vulnerabilities in software, while reducing development cost. 

Security Development Lifecycle (SDL)

Trust

This is an example Order Form for Altia Services as referenced in Altia's Master Services Agreement provided for awareness and reference only. 

Example - Order Form for Altia Services

Legal

Altia's 'Software Licence' was superseded by Altia's Master Services Agreement, and specifically the 'License Subscription Addendum' on 1 July 2023. However some customers are still subject of this licence if explicitly indicated on an Altia Order Form or Invoice.

[LEGACY] Software Licence

Altia's Legacy Support & Maintenance Agreement was superseded by Altia's Master Services Agreement on 1 July 2023 however some customers are still subject of this agreement if explicitly indicated on an Altia Order Form or Invoice.

[LEGACY] Altia's Support & Maintenance Agreement

The License Subscription Addendum outlines the grant by Altia to the Customer for permission to use specific services according to the terms in the entire Agreement. This Addendum also defines the types of Licences; Permitted Use; Restrictions; Ownership & Intellectual Property; and the Addendums relationship with other documents forming the Agreement.

Subscription Licence Addendum (Licence Grant)

Cyber Essentials Plus is a United Kingdom (UK) Government endorsed, industry-supported certification scheme introduced in the UK to help organisations demonstrate operational security against common cyber-attacks.

Altia's achievement of the Cyber Essentials Plus certification demonstrates its commitment to mitigating the risk of common Internet-based threats, within the context of the UK Government's 10 Steps to Cyber Security. It is backed by industry, including the Federation of Small Businesses, the Confederation of British Industry and a number of insurance organizations that offer incentives for businesses holding this certification.

Cyber Essentials sets out the necessary technical controls; the related assurance framework shows how the independent assurance process works for Cyber Essentials Plus certification through an annual external assessment conducted by an accredited assessor. 

Altia complies with this scheme as assessed against the requirements of Cyber Essentials Plus.

Altia Cyber Essentials Plus (2023)

This Beta Agreement applies, in addition to the MSA, to Customers accessing or otherwise using Altia Service(s) in Beta or Testing Stages.

Altia Beta Terms Addendum

The primary purpose of Altia’s IPP is to provide opportunities for Aboriginal peoples and businesses, therefore supporting employment (direct or indirect) and business opportunities for the Aboriginal community reflecting the diversity of Altia’s customers and the communities in which it operates.

Altia APAC Indigenous Procurement Policy

IRAP endorses individuals from the private and public sectors to provide security assessment services.
ASD endorses suitably qualified cyber security professionals to provide relevant services which aim to secure broader industry and Australian Government systems and data. Altia has attained IRAP assessment to PROTECTED.

IRAP Assessment: PROTECTED (October 2022) 

Third Party Service Providers with Access to Personal Data, but not Customer Data or "Altia Service(s) Derived Customer Data".

Third Party Sub Processor Disclosure (DPA Addendum)

Altia develop and provide innovative intelligence and investigation software solutions for a broad range of needs. Customer(s) include law enforcement agencies, government departments, regulatory authorities, tax authorities, along with other government agencies and private sector customers. Due to the nature of data it either store, process, or transmit and the way it is delivered, security is paramount. 

CHECK-accredited IT Health Check (ITHC)

Altia holds insurance policies per the clause(s) set out in the Master Service Agreement. This document provides the details of such insurance as an assurance of currency when considering entering the Agreement with Altia.

Insurance Disclosure

Compliance

Altia's Legal Definition Schedule contains defined Terms to be observed when reading the Agreement or any referenced attachments, annexures, or schedules.

Legal Definition Schedule

Altia’s Privacy Policy apply to both visitors of Altia’s public internet presence and the web and mobile applications that support Altia Service(s).

General Privacy Policy

Altia’s Website Terms of Use apply to visitors of Altia’s public internet presence(s) or website(s) and the web and mobile applications that support Altia Service(s).

Website Terms of Use Agreement

Altia's SLA outlines the standard of performance expected when using Altia Service(s) and Altia Service(s) Support afforded under this Agreement, if Applicable.

Service Level Agreement

Altia’s EULA provides User(s) accessing or otherwise using, Altia Service(s) the basic Terms of the Agreement to be observed when accessing the Altia Service(s) for authorised use.

End User Licence Agreement

The Microsoft Customer Agreement (MCuA) only applies to Customers consuming the Altia Service, 'Altia Compliance Cloud'. The MCuA will be referred to in the Order Form for Altia Service(s) if it is required to be observed and accepted by Customers and by signing an Order Form that references the MCuA in section seven of the Order Form, Customers are also accepting this MCuA.

Microsoft Customer Agreement (MCuA)

IRAP Assessment: PROTECTED (January 2021) 

This is to certify that the Management System of Altia Solutions Ltd (ABM Intelligence Ltd is a subsidiary of Altia Solutions Ltd) at 146 West Regent Street, Glasgow, G2 2RQ, United Kingdom has been approved by Lloyd's Register to the following standards: ISO/IEC 27001:2013.

ISO/IEC 27001:2013

Altia's Jurisdiction Specific Terms Schedule outlines Terms that may apply to an Agreement between Altia and a Customer in specific countries.

Jurisdiction Specifics Terms Schedule

Altia's Information and Cybersecurity Schedule may form part of an Agreement and serves also as educational and awareness information and cybersecurity baselines relevant to Altia Service(s).

Information and Cybersecurity Schedule

Altia's DPA explains how Altia process Customer Data and includes specifics relating to compliance with GDPR.

Data Processing Agreement

Altia's AUP outlines (subject to some exclusions) what Customer(s) or User(s) can and can’t do while accessing or using our Altia Service(s).

Acceptable Use Policy

Altia's MSA, sometimes referred to as ‘general terms’ or ‘master terms’ contain the core legal and commercial obligations that apply to Altia and Customer(s) of Altia Service(s). 