Security Approach
Endevor 2000 has implemented wide-ranging multi-tier security and compliance policies and practices. This comprehensive system, which utilizes both manual and automated solutions, ensures that data remains secure regardless of its form.
Detailed below are some of the physical and electronic security systems and procedures we adhere to.
All employees and management personnel, regardless of position and responsibility, must sign confidentiality and non-disclosure agreements at the time of joining our organization. This is a comprehensive document, legally binding and is an unconditional requirement of employment.
All our customers, regardless of size and the nature of the project, sign a separate nondisclosure and confidentiality agreement.
All data, regardless of its form, is stored in secure rooms that are guarded 24 hours a day around the clock.
All data, documentation, specifications, software, hardware, correspondence or any other information are classified client specific. Access is limited to authorized personnel with proper ID cards, password access, authentication and verification.
All data, and documentation are archived and stored away securely for a specified period of time defined by our clients. Once this term lapses, all physical data, electronic data, and documentation are automatically destroyed.
If there is a need to reference a client or project or pass on contact information - prior written authorization must be obtained from the designated authorized personnel for each respective client. Under no circumstance is any confidential information of any sort distributed or duplicated in any form without our client's written authorization.
Access to our networks, servers, backup systems and related systems is on a rights only basis, which is controlled electronically. This means that user groups, and individual access rights to data are well defined and implemented without bias.
All passwords and access control mechanisms are controlled jointly by designated personnel and systems to ensure that no one individual has sole access.
|