Security

Physical Control

• Biometric scanners and access cards are required to enter our offices.
• Only authorised personnel are allowed to enter the office and processing centre.
• Physical documents, books and other devices are prohibited in the processing centre.
• The entire office is monitored by CCTV.
• All PC’s are desktops running a ‘dumb terminal system’.
• Ability to save and store data on the PC is disabled.
• CD Rom and other drives (USB) have been removed.
• Access to physical/removable drives (external hard drives) have been disabled.
• Printers and scanners are also not available within the processing centre.
• Staff are required to keep personal belongings including: bags, books or mobile devices in secure lockers provided outside the main processing centre.

Non-Physical Control

• Internet activity is heavily controlled with websites required to be added to a “whitelist” before they can be accessed.
• Staff are unable to access personal emails from the office and work emails are unable to send data outside the office.
• Our intranet, internal portals, software and sites have IP Authentication in place so that no one can access these records outside our office premises.
• Access to our internal software is password protected with strength measurement. Passwords are also required to be updated on a regular basis.
• All terminals include screen snapshots and are regularly audited to ensure staff are following security guidelines.
• All our terminals and servers are installed with firewalls, antivirus software, intrusion detection software and prevention systems to minimise any exploits or attacks.
• Our security software is kept updated at all times and when required. All PC’s within our organisation have an auto-lock feature to ensure PC’s are not kept unlocked.
• Wireless connections are prohibited within our back-office in India.

Servers and Support

• A minimum of 99.99% uptime.
• All servers have hardware firewall protection software.
• Enterprise class firewalls provide fully redundant state-full failover to ensure with the highest security and reliability.
• Our dedicated servers are protected by Source fire Intrusion Detection and Prevention System (IDS/PS) ensuring our server’s ongoing security.
• On-site and off-Site continuous data protection services ensures our data is protected 24/7.
• Our server provider also offer our firm 24/7 support.

Training and Education

• All staff must sign a confidentiality agreement in regards to our security protocol relating to data, client information and business insights.
• All staff have a duty to report any breach immediately so the appropriate action can be taken.
• All staff must not share information outside the organisation. If the information is shared within our team, it must only be in reference to completing the work.
• All staff must attend and satisfactorily complete regular data security training sessions.