Virtus Group - Security Assurance Index
v1.5 • Updated 2026-01-15
Owner: Virtus Group Ltd • Audience: Clients, Reviewers & Operations • Classification: Public • Next Review: 2027-01-30
About
Purpose. Provide a single, public index of Virtus Group’s assurance artefacts for customers, assessors and operations. This index tracks what is published, where it lives on the CDN, and how it relates to our Baselines v1.2 (locked) and central security controls.
Scope. The index covers Baselines, Incident & Breach, Privacy & DPIA, Evidence Packs (including DIA), Runbooks, Security Overview, and the full catalogue of Service Listings and Statements of Work (SoWs).
- Baselines v1.2 remain authoritative for SLAs and control expectations (RTO/RPO, backup/restore, patching, identity/device).
- NZISM/PSR mapping is maintained only in the Security Overview document and referenced from all other artefacts.
- DIA evidence packs are published here: CPS and MS.
How to use. For due‑diligence or audits: start with Security Overview, drill into Baselines and Evidence Packs, then corroborate with the relevant Service Listing/SoW. For live engagements, SoWs/Work Orders reference this index and inherit the same baselines.
Security & Assurance Index • Pricing Annex
This document is versioned. Current version: v1.5. If you find a broken link, contact Virtus Group; we will remediate and update the manifest.
Governance
| Document | Location |
|---|---|
| Personnel Vetting (MoJ) | VirtusGroup_Personnel_Vetting_MoJ_OnePager_v1_3.html |
| Physical Security — Summary | VirtusGroup_Physical_Security_Summary_v1_3.html |
| Multi-Vendor Collaboration Playbook | VirtusGroup_MultiVendor_Collaboration_Playbook_v1.0.html |
| Knowledge Mgmt & Handover Standard | VirtusGroup_Knowledge_Management_Handover_Standard_v1.0.html |
| Resource Scaling & Associate Onboarding SOP | VirtusGroup_Resource_Scaling_Associate_Onboarding_SOP_v1.0.html |
| Information Security Policy | Information Security Policy (Client-Safe) |
| Data Classification & Handling | Data Classification & Handling (Client-Safe) |
| Access Control & Acceptable Use | Access Control & Acceptable Use (Client-Safe) |
| Incident Response Summary | VirtusGroup_Incident_Response_Plan_v1_3.html |
BCDR & Continuity
| Document | Location |
|---|---|
| BCDR Summary | VirtusGroup_BCDR_Summary_v1_3.html |
Baselines
| Document | Location |
|---|---|
| Cloud Governance Baseline | VirtusGroup_Cloud_Governance_Baseline_v1_2.html |
| MDM Baseline | VirtusGroup_MDM_Baseline_v1_2.html |
| Vunlerability Management | VirtusGroup_Vulnerability_Management_Procedure_v1_2.html |
Evidence Packs
| Document | Location |
|---|---|
| CPS Evidence Pack | VirtusGroup_DIA_CPS_Evidence_Pack_v1.3.html |
| MS Evidence Pack | VirtusGroup_DIA_MS_Evidence_Pack_v1.3.html |
Incident & Breach
| Document | Location |
|---|---|
| Breach Response Procedure | VirtusGroup_Breach_Response_Procedure_v1_3.html |
| Incident Response Procedure | VirtusGroup_Incident_Response_Plan_v1_3.html |
| Security Incident & Privacy Breach Response Procedure | VirtusGroup_Security_Incident_and_Privacy_Breach_Response_Procedure_v1_3.html |
Privacy & DPIA
| Document | Location |
|---|---|
| DPIA Template | VirtusGroup_DPIA_Template_v1_2.html |
| Privacy Policy | VirtusGroup_Privacy_Policy_Operational_Summary_v1_2.html |
Runbooks
| Document | Location |
|---|---|
| End User Support | VirtusGroup_Runbook_EndUser_Support_v1_2.html |
| Infrastructure Ops | VirtusGroup_Runbook_Infrastructure_Ops_v1_2.html |
| Network Ops | VirtusGroup_Runbook_Network_Ops_v1_2.html |
| Backup & Restore | VirtusGroup_Backup_Restore_Runbook_Overview_v1.0.html |
Security Overview
| Document | Location |
|---|---|
| Security Overview | VirtusGroup_Security_Overview_NZISM_v1_2.html |
Service Pilots
| Document | Location |
|---|---|
| Cloud cost tidy-up | VirtusGroup_Pilot_cloud_cost_tidyup.html |
| Identity & Conditional Access Jumpstart | VirtusGroup_Pilot_identity_conditional_access_jumpstart.html |
| Micro-Segmentation Pilot (App Pair) | VirtusGroup_Pilot_micro_segmentation_app_pair_listing.html |
| Network Segmentation (Campus/SME) | VirtusGroup_Pilot_network_segmentation.html |
| SD-WAN Pilot (Single Branch Turn-Up) | VirtusGroup_Pilot_sd_wan_pilot_single_branch_turn_up.html |
| Backup & Restore (SME baseline) | VirtusGroup_Pilot_backup_restore.html |
| CASB/DLP Pilot (SaaS Focus) | VirtusGroup_Pilot_casb_dlp_pilot_saas_focus.html |
| DMARC + Secure Score | VirtusGroup_Pilot_dmarc_secure_score.html |
| SASE Quickstart | VirtusGroup_Pilot_sase_quickstart_foundation.html |
| Secure Internet Access (SWG/DNS) | VirtusGroup_Pilot_secure_internet_access_pilot_swg_dns.html |
| ZTNA Pilot (Single App / Group) | VirtusGroup_Pilot_ztna_single_app_group.html |
Service Listings
| Document | Location |
|---|---|
| Managed Endpoint Care | VirtusGroup_Service_endpoint_care.html |
| Email & Domain Protection | VirtusGroup_Service_email_domain_protection.html |
| Backup & Recovery (Managed) | VirtusGroup_Service_backup_recovery.html |
| Identity & Access Management | VirtusGroup_Service_identity_access.html |
| Network Security Management | VirtusGroup_Service_network_security.html |
| Cloud Spend Guardrails | VirtusGroup_Service_network_security.html |
| Safe Web & DNS (Managed) | VirtusGroup_Service_safe_web_dns.html |
| Tenant Care for Microsoft 365 | VirtusGroup_Service_tenant_care_m365.html |
| Managed Cloud | VirtusGroup_Service_managed_cloud.html |
| Project / Programme Management (PMaaS) | VirtusGroup_Service_project_programme_management.html |
| Managed Infrastructure | VirtusGroup_Service_managed_infrastructure.html |
| Managed Network | VirtusGroup_Service_managed_network.html |
| CAB‑as‑a‑Service | VirtusGroup_Service_cabaas.html |
| Vulnerability & Patch Management | VirtusGroup_Service_vulnerability_patch_management.html |
IT Service Packages
| Document | Location |
|---|---|
| IT Service Packages | IT Service Packages |
Templates
| Document | Location |
|---|---|
| SIP Template | VirtusGroup_Template_Service_Improvement_Plan_v1.0.html |
| PIR Template | VirtusGroup_Template_PIR_v1.0.html |
| Cloud Risk Assessment (CRA) | VirtusGroup_Template_CRA_v1.1.html |
| Patch/Vulnerability Exceptions Register | Patch_Vuln_Exceptions_Register_v1.html |
| Change Record with Rehearsal & Rollback | Change_Record_Rollback_Template_v1.html |
| Access & Contact Matrix (KT bundle) | Access_and_Contact_Matrix_Template_v1.html |
| Personnel Vetting — MoJ Attestation/Checklist | Personnel_Vetting_Attestation_Form_v1.html |
| Multi-Vendor Collaboration — RACI & Bridge Playbook | MultiVendor_RACI_Bridge_Checklist_v1.html |
| Backup/Restore — Evidence Sheet | Backup_Restore_Evidence_Sheet_v1.html |
Industry Guides
| Document | Location |
|---|---|
| Industry Guides Hub | Industry Guides Hub |
Panels, Certifications, Insurance & H&S
| Area | Details | Evidence / Links |
|---|---|---|
| Government Panels | None at this time. | — |
| Certifications & Partnerships |
Evidence via Capability Statement and Assurance Index; vendor IDs available on request.
|
Security & Assurance Index |
| Insurance | PI NZD 4M • PL NZD 5M • Statutory NZD 1M • IT Liability NZD 5M — Insurer/Broker: Gallagher • Expiry: 13-May-2026 | Insurance Statement |
| Health & Safety (PCBU) | PCBU H&S policy in place; H&S Lead: CEO; incident reporting via Service Desk (0800 847 887). | PCBU H&S Policy |
Contracts
| Document | Location |
|---|---|
| Template SoW - Fixed Price | vgl.sow.fp.template.v1.3.standard.html |
| Template SoW - Time & Materials | vgl.sow.tm.template.v1.3.standard.html |
| Template WO - Fixed Price | vgl.wo.fp.template.v1.2.standard.html |
| Template WO - Time & Materials | vgl.wo.tm.template.v1.2.standard.html |
| Template CVO | vgl.cvo.template.v1.2.standard.html |
© Virtus Group Ltd — Final Version