Information security responsibility
Last updated: Nov 4, 2026
Two of the responsibilities of the CTO of Fluid Attacks are to define and enforce information security policies. The purpose of these policies is to fully protect the data of customers and of Fluid Attacks. The CTO works together with the Engineering team of Fluid Attacks to make sure that Fluid Attacks follows state-of-the-art best practices in information security.
The staff of Fluid Attacks reads and accepts the Information Security Policy through Vanta.
Policy review
Fluid Attacks reviews the Information Security Policy every year. The Engineering team also reviews and updates the policy after any significant change. This process keeps the security controls of Fluid Attacks aligned with current risks and audit requirements.
Requirement
This Fluid Attacks requirement applies to the controls on this page:
331. Guarantee legal compliance
Other transparency measures
Incident management
Fluid Attacks follows a structured incident response plan, utilizing an Incident Desk for rapid resolution and publishing detailed postmortems for transparency.
Quality policy
Discover the Fluid Attacks Quality policy, driving secure software development through customer focus, expert teams, accurate testing, and clear SLAs.