Security & research policy

Security policy

At mruk we adhere to the standards and practices specified in ISO27001. All mruk research staff are subject to a detailed Information Security Policy and mandatory annual policy training. Our password policy requires all staff to maintain strong, unique passwords which must be changed at least every 3 months. Remote access to the network is encrypted and requires two form authentication (password and token-based, constantly changing pin).

All suppliers who come into contact with our data, or the data of our clients, are required to sign confidentiality agreements. All other suppliers are bound by our Terms and Conditions, copies of which are attached to client/supplier agreements, and which require them also to conform to the 1998 Data Protection Act.

Research practices

mruk research adheres to the Data Protection Act 1998 and the Market Research Society (MRS) Code of Conduct.