scope:

This standard applies to TfL Cyber Security, Information Technology (IT) and Software Engineering teams when acquiring, developing and maintaining our systems within the required controls to reduce opportunity for threats to our information.

Purpose

This standard summarises the information security controls required for IT system acquisition, development and maintenance. It summarises the information security access controls that align to the information security standard ISO27001.

It outlines how TfL systematically manages and protects the confidentiality, integrity, and availability of TfL's information assets from threats and vulnerabilities.