|
Home >> Capabilities >> Infrastructure Security & IP
|
Safesoft adheres to the most strict security practices and procedures to protect
access to strategic information and guarantee business continuity under all circumstances.
This ensures that businesses are proactively protected from threats that can impact
their operations and profitability. The check list defined in ISO 27001 is validated
internally. Heavy investment has been made in risk management, data compliance,
and network & processes. Dedicated security resources are deployed and all employees
are trained on security protocols and procedures. Periodic rehearsals are carried
out to validate security strategy and implementation. The Business Continuity Plan,
Disaster Recovery Plan and Backup Plan are enforced. Innovative near-shore or onshore
data and/or application hosting environments are offered to certain client-partners
to ensure an optimal comfort level.
|
Safesoft's Security Infrastructure & Procedures
|
To protect physical security of the premises, we have
- Security check-in at building with 24x7 monitoring
- Visitors require escorts at all times within Safesoft
offices
- Video monitoring
- Restricted printing/storage areas
- Dedicated lab space with restricted access available
- Audit inspections
To protect electronic security in Safesoft, we have
- SPOP3 mail encryption with password changes
- Firewalls on corporate networks
- Client-specific isolated networks upon request
- Access logging and auditing
- Instruction detection system
- Virus-free email server
- IP-network limitations and password authentication for
FTP/SFTP services
- Back-up and back-up logging
To ensure individual security in Safesoft, we require
- Security badges to be worn at all times
- Personal inspections can be made at company's discretion
Intellectual Property Rights Protection (IPRP)
Safesoft understands that our ability to protect the Intellectual Property Rights
of our client-partners is not only very important, but a necessity for doing business.
As such we are working very closely with the Chinese government to influence the
development and implementation of more current IPR laws and policies, and are also
working "within our circle of control" to enhance internal IPR protection practices
with Safesoft.
The following methods are applied in Safesoft:
- Background checking before hiring
- Intellectual property awareness in employment contract
and new employee training
- NDA and IP protection clauses in MSAs and SOWs
- Physical and network security
- Use licensed software
- CMMI3 certified, started to implement CMMI4 and ISO
27001
- Offshore Development Centers (ODC) are established according
to client's specific IP protection requirements
|
|