Security Policy

The Society approaches security as an institutional responsibility rather than a technical formality. Its commitments here are stated as principles; the specific technical and organisational measures by which those principles are realised are matters of institutional administration.

The Society maintains administrative, organisational, and technical safeguards appropriate to the nature of the information held and the services provided. These safeguards include controls on access, controls on transmission, and provisions for the integrity and recovery of institutional records.

Members are responsible for the secure use of their access credentials and for the integrity of devices through which they engage with the Society's services. The Society relies upon members to act in accordance with this responsibility.

Where the Society becomes aware of a material incident affecting the security of information held about members, it will take such institutional action as is appropriate, including notification to members where required by law or by good institutional practice.

Persons who identify a security concern affecting the Society's services are invited to communicate that concern privately to the Society's offices, in advance of public disclosure, so that the Society may address it.

This Policy is to be read together with the Privacy Policy and the Terms of Service.