Information & Security Policy
Last updated: 30 December 2025
Information Security & Cyber Security (LMW)
London Machine Works Ltd (LMW) takes information security seriously. We protect company, customer, and supplier information by applying risk-based controls designed to keep data confidential, accurate, and available.
Our commitment
We:
- Protect sensitive information (commercial, technical and personal data)
- Prevent unauthorised access to systems and files
- Reduce cyber risk through secure working practices and technical controls
- Train our people to recognise threats such as phishing
- Maintain and improve our controls over time
Cyber Essentials
LMW maintains cyber security controls aligned to the UK Government’s Cyber Essentials requirements, including:
- Firewalls / secure gateways to control network access
- Secure configuration to reduce attack surface and remove insecure defaults
- User access control using least privilege and controlled admin access
- Malware protection to reduce the risk of malicious software
- Patch management to keep systems supported and updated
How we protect information
- Access is restricted to authorised people on a need-to-know basis
- Strong authentication is used, and MFA is enabled where available
- Sensitive information is stored and shared securely
- Backups are maintained to support recovery and continuity
- Suppliers handling our information are expected to meet appropriate security standards
Reporting and response
We encourage prompt reporting of suspected cyber incidents (e.g., suspicious emails, lost devices, unusual system behaviour). We investigate, contain, and recover quickly, and we take corrective action to prevent recurrence.
Review
Our security arrangements are reviewed regularly, and at least annually, to ensure they remain effective and appropriate.
If you want to discuss information security arrangements for a project, please contact us at: info@londonmachineworks.com




