Business Security Practices
Vendor Management
-
Due diligence on all third-party vendors.
-
Annual reviews of critical vendors (financial, legal, operational).
Security Governance
-
Frameworks aligned to NIST and ISO 27001.
-
Partnered with external security firm for penetration testing, incident response, and risk management.
Employee Security
-
Background checks (role-dependent).
-
Confidentiality agreements signed by all staff.
-
Annual cybersecurity training (phishing, data handling, incident response).