Security Standard
MAN-STD-SEC-001
Draft

Trust and Security Standard

Establishes the baseline governance requirements for protecting MANIDASO participants, systems, records and governed trade activity against misuse, compromise and unauthorised access.

Document standing

Authority and Standing

These Platform Standards are issued by MANIDASO LTD as the operator and governing authority of the MANIDASO Trade Governance Platform. Each published Platform Standard forms part of the official MANIDASO Platform Standards Register and establishes the governance requirements applicable within its defined scope. Unless expressly stated otherwise, the current published version constitutes the sole authoritative version of the standard.

CURRENT OPERATING POSITION

How this standard currently applies

Access and activity within MANIDASO must be proportionate to verified identity, authorised role, transaction need and applicable security controls.

IMPLEMENTATION STATUS
Under review
DELIVERY MODEL
Platform-governed
CURRENT PLATFORM COVERAGE

Applies across currently enabled MANIDASO services, administrative functions, participant access and governed records, subject to the capabilities of MANIDASO and its approved providers.

OPERATING LIMITATIONS

No technical or governance control eliminates all security risk. Controls are applied proportionately and may depend on third-party systems and providers outside MANIDASO's direct control.

CURRENT APPLICATION

This standard is applied to activity conducted through official MANIDASO services and recorded platform processes, subject to the relevant service, route, provider and transaction conditions.

00

Publication and control record

This record identifies the current version, publication status, ownership, approval and implementation position of this standard.

STANDARD REFERENCE
MAN-STD-SEC-001
DOCUMENT TITLE
Trust and Security Standard
DOCUMENT CLASS
Security Standard
DOCUMENT STANDING
Draft Standard
VERSION
1.0
PUBLICATION STATUS
Draft
EFFECTIVE DATE
27 July 2026
LAST UPDATED
27 July 2026
DOCUMENT OWNER
MANIDASO Platform Governance
APPROVAL AUTHORITY
MANIDASO Platform Governance
Approval Date
27 July 2026
01

Purpose of this standard

To establish proportionate trust, security and protective controls across MANIDASO services and governance processes.

02

Scope

This section defines the operational boundaries, platform components, routes and markets to which this standard applies.

Operational Scope

This standard applies to participant access, administrative access, platform records, documents, communications, credentials, integrations, transaction information and security-relevant operational activity.

Applicable Markets
United Kingdom
Ghana
03

Principles

The principles governing the interpretation, application and operation of this standard.

No items found.
04

Definitions

Terms used within this standard that require a defined meaning for consistent interpretation and application.

No items found.
05

Standard requirements

Mandatory and conditional requirements established under this standard.

No items found.
06

Control framework

Control activities supporting the implementation, monitoring and assurance of this standard.

No items found.
Related requirements
No items found.
07

Responsibilities and accountability

Roles, responsibilities and authorities relevant to the implementation, operation and oversight of this standard.

No items found.
08

Evidence and records

Evidence and records required to demonstrate implementation, compliance and effective operation of this standard.

No items found.
09

Exceptions and approved departures

Any departure from this standard must be identified, assessed, authorised and recorded in accordance with the applicable governance process.

Security-control exceptions require documented justification, defined duration, risk assessment, compensating controls and authorised approval.

Exception authority
MANIDASO Platform Governance
Approval requirement
Prior approval is required for any material departure unless immediate protective action is necessary; any retrospective approval must be documented promptly.
 Recording requirement
Record the exception, rationale, affected requirement, approver, conditions, duration and outcome in the applicable governance record or Trust File.
Review requirement
Review the exception before expiry, when circumstances materially change, or sooner where required by risk, law, provider conditions or governance direction.
10

Compliance and non-compliance

Compliance with this standard is required within its defined scope. Identified non-compliance must be assessed, recorded and addressed through the applicable governance process.

Suspected compromise, unauthorised access, credential misuse or security-control failure must be recorded, contained and escalated according to severity.

Escalation framework

Escalation stages apply where non-compliance is material, repeated, unresolved or otherwise requires governance intervention.

No items found.
13

External references and authorities

External legislation, regulatory guidance, recognised standards and other authoritative sources relevant to this standard.

Reference register
References are provided for context and should be read in their current authoritative form.
No items found.
14

Revision history

A chronological record of revisions, amendments and publication updates to this standard.

No items found.
15
16

Questions and enquiries

Questions relating to the interpretation, application or implementation of this standard should be submitted through the official MANIDASO governance contact channels.