1. Membership#
Chair: CISO. Members: CTO, Head of Network, Head of SOC, DPO. Independent NED attendee quarterly.
2. Scope#
- 26-layer Abel control surface - health and gaps.
- Continuous compliance evidence (NCSC CAF, ISO 27001).
- Threat-model register and pentest cadence.
- Incident response readiness and post-incident reviews.
- TSA designated-vendor review.
3. Incident-time role#
Stands up the Major Incident Cell, owns regulator-notification clocks, signs off public statements.
4. Cadence#
Monthly. Extraordinary sessions on demand for any P1 incident or material control gap.
5. Review & ownership#
Owner: CISO. Reviewed annually.
Version history
| Version | Date | Change |
|---|---|---|
| v1.0 | 22 April 2026 | Initial publication. |
This document is published by Boundless Telecom Ltd and forms part of our public legal posture. It is a living document - we update it as the regulatory environment, our supply chain or our products change. If anything here is unclear or you'd like a counter-signed copy, contact legal@boundless.tel and we'll respond within one working day.