Security matters to NTA Enterprises. This page explains how to report a suspected issue and sets clear limits on what is currently represented about www.nta.enterprises.
Current service profile
The current website is a public informational service. The NTA application does not provide user accounts, accept payments, collect information through an online form or expose a client workspace.
Hosting and network providers may operate infrastructure-level controls and strictly necessary technology. Their controls and assurance materials are separate from any assurance claim made by NTA Enterprises.
Security approach
We seek to use proportionate technical and organisational measures for the information and service in scope. No website or transmission method is completely secure, and this page does not guarantee that an incident cannot occur.
The website should be reviewed when its functionality or data handling changes so that safeguards remain appropriate to the revised risk.
Report a suspected vulnerability
Send a concise report to security@nta.enterprises with the affected URL, a description of the issue, steps to reproduce it and the potential impact. Include proof only to the extent necessary to explain the issue, and remove personal or confidential information wherever possible.
Do not disrupt the service, access or alter another person’s information, use social engineering, conduct denial-of-service testing, deploy malware or test any system without permission. Stop if testing could cause harm and report what you observed.
How reports are handled
We will review credible reports and may request clarification. This page does not establish a vulnerability-reward programme, safe-harbour agreement, response-time commitment or remediation service level. Any disclosure coordination must be agreed in writing.
Compliance position
NTA Enterprises does not currently claim that this website or the organisation is certified under ISO 27001, SOC 2, PCI DSS or another formal security framework. The current site does not process payments, so it does not itself perform payment-card processing.
Specific client, supplier or event-production requirements should be assessed in context and documented in the relevant agreement. A hosting provider’s certification does not automatically certify NTA Enterprises.
Responsible use
Security information on this page is provided for reporting and transparency. It does not grant permission to access systems, data or accounts, and it does not replace written authorisation for security testing.
Updates
We may update this page as the website, suppliers or assurance position changes. Claims should be read as of the date shown and verified for any procurement or contractual decision.
Contact
Use the relevant address below. Email only the information needed for your enquiry and avoid sending passwords or unnecessary sensitive data.
Compliance enquiries
compliance@nta.enterprisesAsk a factual question about a client or supplier requirement.