At PhilSysta, we have a well defined, effectively implemented, constantly updated and periodically audited set of security procedures that are followed in the organization. We consider each and every bit of information processed by us as confidential and follow strict measures to ensure 100% confidentiality of the clients’ data. We also sign the Confidential Disclosure Agreement with the clients prior to starting with their engagement.
Below listed are the key measures whereby we ensure complete confidentiality of our clients' data:
¨ Access to our office infrastructure is restricted only to authorized personnel, which is ensured by our security guards.
¨ We follow the principle of least privilege for access to data and provide access to information within the organization to our associates if and only if it is absolutely necessary to perform their delivery activity.
¨ All out associates sign the Confidentiality Agreement while joining our organization.
¨ We conduct a compulsory course on Acceptable Use and Data Security policy for all the associates on an annual basis.
¨ None of our workstations have USB ports enabled on them.
¨ There is no CD/DVD writer installed on any of our workstations.
¨ The CPU cabinets on all our workstations are locked to prevent any type of physical tampering.
¨ None of the associates (except System admins) have got Administrator/Power User privilege on the workstations.
¨ Access to internet content is strictly filtered using a proxy server.
¨ Photography and use of mobile phones with camera/voice/video recorder is strictly prohibited within the office.
¨ All the print-outs taken by the associates are logged and a copy of the printed document is saved on our server, which is audited periodically.
¨ No hard copies of documents are allowed to be taken outside the office.
¨ Shredding of printed/hard copy documents is done after the intended purpose is over.
¨ None of the client deliverables/input documents are stored on the workstations.
¨ Only software authorized by our security team are installed on the workstations and none of our associates except System Admins have the privilege to install/remove software on the workstations.
¨ There are periodic audits conducted by our system security team on all the workstations and servers and instances of non-conformance are reported to the management instantly.
¨ Documents delivered to the client are stored on our file server only for 2 weeks, after which they are deleted permanently.
¨ No hard copy or soft copy of document of any type are allowed to be taken outside the company premises. This is ensured by surprise checks.
¨ Associates are not allowed to bring USB drives / CDs or electronic copying media of any type into the office.
No personal data belonging to the associates are allowed to be stored on the workstations. An automated weekly scan on the workstations detect instances of non-conformance.
Non-conformance to our security policy is considered very serious and is dealt with appropriately. With these time-tested and continuously improved security measures, we can ensure 100% confidentiality of your data.