Information Security Policy

Personal and enterprise client data is governed per strict GDPR standards overseen by designated Data Protection Officers. Data minimization and anonymization protocols are enforced globally.

Quarterly simulated phishing, ransomware, and DDoS operational attacks test readiness. Response speeds are benchmarked against NIST 800-53 standards with a target incident response under 1 hour.

All operational technology (OT) and IT environments—including SCADA systems and hazardous area IoT devices—utilize AES-256 bit encryption. Multi-factor authentication (MFA) is mandatory for system entry.

A dedicated Cyber Incident Response Team (CIRT) operates round-the-clock. Post-incident lessons feed directly into security updates, while annual penetration tests ensure zero unpatched high-severity risks.