CYBERSECURITY & DATA SECURITY STATEMENT

Security Measures

• Encryption (in transit and at rest)
• MFA and access controls
• Secure cloud infrastructure
• Monitoring, audits, and training
• Third-party risk assessments

Incident Response and Resilience

Alea Consulting maintains procedures to detect, investigate, and respond to potential security incidents in a timely manner.

Our security program includes incident response protocols, backup management, and business continuity measures designed to minimise disruption and protect critical information assets.

Responsible Disclosure and Vulnerability Reporting

Alea Consulting is committed to maintaining the security of its systems, services, and information assets. We value the role of the security community and encourage responsible reporting of potential vulnerabilities.

If you believe you have discovered a security vulnerability related to Alea Consulting’s systems, applications, or website, we request that you report the issue responsibly so that it can be investigated and addressed promptly.

When reporting a vulnerability, please include:

• A description of the vulnerability
• The affected system or webpage
• Steps required to reproduce the issue
• Supporting evidence such as screenshots or logs

Alea Consulting will review all legitimate reports and take appropriate action. We request that researchers:

• Avoid actions that could compromise data privacy or system availability
• Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue
• Refrain from publicly disclosing the vulnerability until it has been reviewed and addressed

We appreciate responsible disclosures that help strengthen our security posture and protect our clients and stakeholders.

Accessibility Statement

Alea Consulting is committed to digital accessibility and inclusion.

Accessibility measures include keyboard navigation, alt text, appropriate contrast, assistive technology compatibility, and responsive design.