Governance performance
Promoting Ethical Practices
Policies and Whistle-blowing Initiatives
We are committed to adhering to various policies that guide our governance practices. All policies have been approved by senior management and the Board, and include our Code of Conduct, Modern Slavery Statement, Data Protection Policy, Anti-bribery- and Corruption Policy, and Information Security Policy. These policies ensure that our operations are conducted with integrity, compliance, and protection of data and information.
In line with our dedication to ethical practices, we have also implemented a whistle-blowing policy, which was released in 2022. This policy encourages employees to report any concerns or suspicions regarding unethical behaviour or non-compliance, providing a safe and confidential channel for disclosure.
EcoOnline's policy on workplace harassment, equal pay, and whistleblower protection reflects our commitment to creating a safe, inclusive, and ethical work environment for all employees.
We provide training on anti-corruption and anti-bribery policies through yearly e-learning programs, as well as it is included in employee onboarding processes.
Cybersecurity
Cybersecurity is a critical aspect of EcoOnline's responsible operations, and we are continuously making improvements to our cybersecurity to align with the requirements of our ISO 27001 certification.
EcoOnline maintains a regularly tested incident response plan and our recent security incident response. All employees receive regularly training on cybersecurity, including how to prevent social engineering exploits.
Maintaining ISO Certification Excellence
The continuous work to attain our ISO certifications is led by the Director of Standards & Certification. In 2023 we successfully retained our ISO 9001, 22301, and 27001 certifications.
These certifications provide tangible evidence of our dedication to meeting and exceeding customer expectations, maintaining business continuity, safeguarding sensitive information, and positioning ourselves as a trusted partner. By attaining these certifications, we continuously strive for operational excellence, ensuring the highest standards of quality, resilience, and information security in all our endeavours.
The scope of the certifications includes our products and physical locations. All employees are required to read the policies regularly and enroll in training when asked.
A Showcase of Our Commitment to Quality and Security
ISO 9001: 2015 Quality management
At EcoOnline, we pride ourselves on delivering products and services of the highest quality to our customers. Our ISO 9001 certification is a testament to our commitment to maintaining robust quality management systems.
ISO 22301: 2019 Security and resilience
Through our ISO 22301 certification, we demonstrate our commitment to ensuring uninterrupted service delivery to our customers, even in challenging circumstances. We have implemented robust measures to identify and assess risks, develop business continuity plans, and regularly test and update our response strategies.
ISO/IEC 27001: 2013 Information security
By holding ISO 27001 certification, EcoOnline demonstrates our unwavering commitment to safeguarding information assets and maintaining the trust and confidence of our customers. We are dedicated to protecting your data and ensuring that it remains secure and confidential at all times.
ISO 14001: 2015 Environmental Management Systems
Holding an ISO 14001 certificate is crucial for EcoOnline as it demonstrates our commitment to environmental management and sustainability. This certification validates that we have established a systematic approach to managing environmental responsibilities, ensuring compliance with regulatory requirements, and continually improving our environmental performance.
ISO 45001: 2018 Occupational Health and Safety Management Systems (OHSMS)
By achieving ISO 45001, we demonstrate our proactive approach to preventing workplace injuries and illnesses, enhancing employee well-being, and complying with regulatory requirements. This certification confirms that we have implemented a robust framework to manage and mitigate health and safety risks, ensuring a safe working environment for all employees.