AV Intellicore Security & Trust Centre

Our Security Principles

Security Architecture and Platform Management

Centralised Monitoring and Control

AV Intellicore uses a centralised remote monitoring and management (RMM) architecture to provide visibility of supported workplace technology across customer environments.

The management layer communicates with configured monitoring components and managed devices to collect relevant status information, identify issues and facilitate authorised management tasks. This allows Display Manager's technical team to manage distributed workplace technology through a consistent operational interface.

Depending on the deployment, managed components may include Windows-based room PCs and monitoring probes located within the customer's network environment. This architecture supports:

• Centralised device inventory and status monitoring.
• Collection of relevant health, performance and availability information.
• Monitoring of supported services, processes and system resources.
• Remote diagnostics and authorised maintenance.
• Automated tasks and remediation scripts where appropriate.
• Centralised reporting across supported sites and devices.

Monitoring coverage depends on device compatibility, connectivity, permissions and the configuration agreed for the customer environment.

Intellicore Server & Cloud Security

The AV Intellicore server is hosted on Microsoft Azure, providing a secure cloud infrastructure for the centralised monitoring and management of connected workplace technology.

Microsoft Azure provides multiple layers of physical, network and infrastructure security. Display Manager manages the Intellicore service within this environment, with security dependent on the configuration and controls applied to the deployed server.  Our approach to server security includes:

• Access control – restricting administrative access to authorised personnel.
• Network security – controlling permitted connections and minimising unnecessary exposure.
• Secure communications – protecting data in transit using supported encryption protocols.
• Server maintenance – managing security updates and addressing relevant vulnerabilities.
• Monitoring and resilience – monitoring server health and maintaining appropriate backup and recovery arrangements.

Cloud security is a shared responsibility. Microsoft protects the underlying Azure infrastructure, while server configuration, access management and ongoing maintenance depend on the responsibilities assigned to the service provider.

For further information, see Microsoft's Azure infrastructure security documentation.

Independent Security Assurance

AV Intellicore uses established cloud infrastructure and remote monitoring technology with independently assessed security controls. Display Manager manages the service within its operational scope, with security dependent on the configuration, controls and responsibilities applicable to the deployment. Further information about relevant security assurance and supporting documentation is available on request.

Platform Architecture

The remote monitoring and management layer used within AV Intellicore, supports the management of configured endpoints and monitoring components, enabling centralised visibility, automation and remote technical intervention.

Within AV Intellicore, this capability is applied to the specific requirements of workplace and audiovisual technology, rather than being limited to conventional desktop IT support.

Display Manager uses this management capability to support activities such as:

• Monitoring supported meeting-room PCs and connected technology.
• Identifying device health issues and service interruptions.
• Managing approved maintenance and update activities.
• Running predefined scripts to address common technical issues.
• Providing remote diagnostics to reduce unnecessary site visits.
• Maintaining visibility of assets and relevant device information.

AV Intellicore provides a set of security and access-management capabilities, including encrypted communications, authentication options and role-based access controls. The protections available to a particular customer depend on the deployed version, enabled features and configuration of the management environment.

Network Integration and Customer Environments

Workplace technology may connect to corporate networks, dedicated audiovisual VLANs or other segmented network environments.

AV Intellicore deployments should be planned with the customer's IT team to establish the appropriate connectivity, access permissions and monitoring requirements.

Network design and configuration should consider:

• Separation of audiovisual and corporate traffic where required.
• Approved communication paths between managed components and management services.
• Firewall rules and permitted network ports.
• Least-privilege access for monitoring and maintenance.
• Restrictions on administrative interfaces and remote support.
• The customer's security policies and change-control requirements.

The specific network configuration depends on the customer's environment and the services being delivered. AV Intellicore does not remove the need for appropriate network segmentation, firewall policies or endpoint security.

Encryption, Authentication and Access Controls

Protecting Communications

Communications between management systems and managed components should be protected using supported, appropriately configured secure protocols.

The platform architecture supports modern TLS-secured communications, including TLS 1.2 and TLS 1.3 in supported interfaces and configurations. Remote management functions may use additional secure connection mechanisms depending on the feature and deployment.

The effective protection depends on the versions, security profiles, endpoints and communication paths in use. Display Manager should confirm the configuration applicable to the deployed AV Intellicore service before making environment-specific encryption commitments.

Authentication and Identity

Access to management systems and remote support capabilities must be appropriately controlled to reduce the risk of unauthorised administration.

Relevant controls may include:

• Individual user accounts rather than shared administrative identities.
• Multi-factor authentication (MFA), where enabled and supported.
• Role-based access controls to limit permissions according to operational responsibilities.
• Strong authentication policies and secure credential handling.
• Prompt removal or adjustment of access when responsibilities change.
• Restricted access to management interfaces and administrative functions.

Access requirements should be reviewed periodically and aligned with Display Manager's operational procedures and the customer's security requirements.

Privileged Access and Remote Support

Remote administration is a powerful capability and must be treated as a privileged activity.

AV Intellicore enables authorised technical personnel to investigate and resolve supported issues remotely, subject to the access controls and configuration in place.

The security of remote support depends on appropriate authentication, permissions, secure communication mechanisms and the protection of administrative credentials.

Remote management should be limited to the devices, systems and tasks required to deliver the agreed service. Customers should retain oversight of their network access policies and any approvals required for remote maintenance.

Where supported by the relevant remote-control mechanism, session records and activity logs can help provide traceability of remote actions. The available records depend on the feature and configuration.

Monitoring, Endpoint Protection and Proactive Maintenance

Continuous Monitoring

The AV Intellicore platform is designed to provide ongoing monitoring of supported devices and services, helping Display Manager identify potential problems before they develop into more significant operational issues.

Depending on the device and configuration, monitoring may include:

• Device availability and connectivity.
• CPU, memory, storage and other system health indicators.
• Relevant services and running processes.
• Supported software and operating system status.
• Hardware and software inventory information.
• Configured alerts and security-related events.

Monitoring is not equivalent to a guarantee that every threat or fault will be detected. Coverage depends on the telemetry available, monitoring configuration and the capabilities of the managed device.

Patch and Update Management

Unpatched operating systems, applications and firmware can expose connected devices to known vulnerabilities.

AV Intellicore supports the management of updates for compatible devices and software, helping Display Manager maintain a more consistent approach to ongoing maintenance.

The process may include:

1. Identifying applicable updates and maintenance requirements.
2. Reviewing compatibility and operational considerations.
3. Scheduling or approving updates in line with the agreed approach.
4. Deploying supported updates and monitoring the resulting device status.
5. Investigating failures or issues that require further action.

Not all devices support automated updates, and some updates may require testing, customer approval, vendor intervention or a planned maintenance window.

Endpoint Protection

Where supported and configured, AV Intellicore can incorporate endpoint protection and security monitoring capabilities for compatible systems.

These capabilities may help identify or prevent certain forms of malicious activity and provide additional visibility into device security status.

Endpoint protection is one layer of a broader security strategy. It does not replace network security, identity protection, vulnerability management, user awareness or the customer's wider security monitoring and incident response arrangements.

Automation and Remediation

Predefined scripts and automated tasks can help resolve recurring issues, maintain system configuration and reduce manual intervention.

Automation is applied according to the task, device compatibility and agreed operating procedures. Changes that could affect business-critical services should be appropriately tested, authorised and monitored.

Automated remediation can improve consistency and reduce resolution times, but it should not be interpreted as a guarantee that all incidents will be resolved without technical intervention.

Data Protection and Privacy

What Information does AV Intellicore Process?

The information processed by AV Intellicore depends on the devices being managed, the monitoring functions enabled and the support services agreed. Depending on the deployment, this may include:

• Device identifiers, hostnames and asset inventory.
• Operating system, software and hardware information.
• Device health, availability and performance metrics.
• Alert information, diagnostic data and relevant logs.
• Management and maintenance status.
• Technical information required to investigate support issues.
• Administrative account and access information required to operate the service.

The monitoring of device health and technical status does not, by itself, mean that AV Intellicore records meeting conversations or routinely captures audiovisual content. Customers should confirm the data flows associated with their particular devices and any separately enabled applications or recording services.

Data Minimisation and Access

Only information necessary to operate, monitor, maintain and support the agreed service is be collected and accessed. Technical information may contain sensitive details about an organisation's IT environment. Access will be restricted to authorised personnel with a legitimate operational requirement.

Customer information is be handled in accordance with applicable contractual arrangements, data protection requirements and Display Manager's relevant policies.

Hosting, Retention and Data Handling

Customers undertaking a security or privacy assessment may need to understand:

• Where the relevant management services and customer data are hosted.
• Which parties process the data and in what capacity.
• What information is retained and for how long.
• How data is accessed for technical support.
• What arrangements apply when a service ends.
• Which contractual and data protection documents are available.

These details should be confirmed for the applicable AV Intellicore deployment and reflected in the relevant documentation. They should not be inferred solely from the general capabilities of the underlying technology.

Display Manager can discuss the information available for your proposed or existing service to help your IT, security and privacy teams assess its suitability.

Vulnerability Management and Responsible Disclosure

Managing Vulnerabilities

Security vulnerabilities can affect operating systems, applications, firmware, management software and connected devices. Effective management requires a structured process for identifying relevant issues, assessing their impact and prioritising remediation.

Display Manager's approach to maintaining AV Intellicore include:

• Reviewing relevant vendor security advisories and product updates.
• Assessing whether reported vulnerabilities affect the deployed components.
• Prioritising remediation according to severity, exposure and operational risk.
• Applying relevant updates or mitigations in accordance with the approved maintenance process.
• Testing changes where appropriate and monitoring deployment outcomes.
• Communicating material customer actions or service impacts where required.

The urgency of a response depends on the vulnerability, the affected component, the availability of a fix and the circumstances of the deployment. Some issues may require immediate mitigation, while others can be addressed through planned maintenance.

Vulnerability Disclosure

Display Manager welcomes responsible reporting of suspected security vulnerabilities affecting AV Intellicore or the services we operate.  If you believe you have identified a security weakness, please contact Display Manager through our designated security contact route and provide:

• A description of the suspected vulnerability.
• The affected product, service or component, where known.
• The potential impact and relevant conditions required to reproduce the issue.
• Any supporting evidence that can be shared safely.

Please avoid including personal data, customer credentials or unnecessary confidential information in your initial report. Do not attempt to access data, disrupt services, test against other customers' environments or exploit a suspected vulnerability beyond what is necessary for responsible reporting.

We will assess the report, seek further information where required and coordinate appropriate investigation and remediation. Where a third-party component is involved, resolution may also require coordination with the relevant supplier.

Please allow reasonable time for investigation and remediation before publicly disclosing a suspected vulnerability. To report a security concern, please contact support@displaymanagervc.com

Security Governance, Standards and Assurance

Security assurance requires more than technical features. It also depends on defined responsibilities, documented processes, risk management and the ability to provide relevant evidence.

Display Manager maintains wider business management systems and holds the following certifications and accreditations:

• ISO 9001 – Quality Management.
• ISO 14001 – Environmental Management.
• ISO 45001 – Occupational Health and Safety.
• Cyber Essentials.
• SafeContractor and Constructionline Gold.

These credentials relate to the applicable scope of Display Manager's business and management systems. They should not be interpreted as independent certification of AV Intellicore itself unless that scope is explicitly confirmed by the relevant certificate.

Security Documentation Available to Customers

To support technical due diligence, supplier assessments and procurement processes, customers may request relevant documentation, subject to availability and any applicable confidentiality restrictions.

Depending on the requirements and deployment, this may include:

• Applicable information security and data protection policies.
• Relevant certification details and statements of scope.
• Data-processing and contractual documentation.
• Information about hosting, data handling and third-party processing.
• Technical details concerning monitoring, access and remote support.
• Relevant vulnerability management and incident communication procedures.
• Service descriptions, support arrangements and continuity information.

We aim to provide relevant, accurate information to help customers understand the service and assess it against their own requirements. Some technical documentation may be provided directly to customers rather than published publicly, particularly where it contains sensitive operational or security information.

Service Resilience and Incident Management

Security and availability are closely connected. A compromised, misconfigured or unavailable workplace system can disrupt meetings, communication and day-to-day operations.  AV Intellicore helps support operational resilience by providing ongoing monitoring, asset visibility, remote diagnostics and maintenance capabilities for supported devices.

When an issue is identified, the response depends on its nature, severity, impact and the customer's agreed support arrangements. Activities may include investigation, remote troubleshooting, maintenance, escalation to a manufacturer or specialist, and coordination with the customer's IT team.

Customers should distinguish between:

• Monitoring coverage: which devices and conditions are monitored.
• Support response: how quickly the service team responds under the applicable agreement.
• Resolution: how quickly a particular issue can be diagnosed and resolved.
• Service availability: the availability commitment, if any, defined in the relevant agreement.

These are separate measures. Monitoring alone does not guarantee prevention of incidents or uninterrupted service.