Corporate Governance
The Group maintains a formal governance and control environment appropriate to clients in regulated industries, government and multinational procurement.
Principles applied across the Group
Verifiable representations
Certifications and licences are published with their current status and supported by documentary evidence on request. Representations made in tender responses are consistent with that register.
Professional independence
The Group maintains independence in its assurance work and operates licensed services in accordance with the applicable regulatory framework.
Information security
A formal control environment governs the Group’s hosting and data-centre estate, aligned to ISO/IEC 27001 and subject to periodic internal review.
Data residency
Client workloads and client data are held on Malaysian infrastructure under Malaysian jurisdiction unless a client directs otherwise.
Operational controls
The Group’s hosting and data-centre estate is operated to the following control baseline, which is subject to review and available in detail for supplier assessment.
- Malware detection with automated remediation across shared hosting infrastructure.
- Web application firewall with a maintained managed ruleset.
- Enforced HTTPS with automated certificate renewal across hosted domains.
- Scheduled backups with a documented and tested restoration procedure.
- SPF, DKIM and DMARC published across Group domains and available to clients.
- Client data held under Malaysian jurisdiction unless otherwise directed.
Vulnerability disclosure
Security issues identified in any Packet Labs, Serverlicious or PacketDCS system may be reported to the Group directly. Reports are acknowledged, the reporter is kept informed of remediation, and no action is taken against good-faith security research.
Business conduct
The Group does not offer or accept improper payments and requires the same standard of its suppliers and partners. Conduct expectations form part of engagement letters and supplier agreements.
Supplier questionnaires
Completed vendor assessment questionnaires and a named point of accountability are provided on request.