Controls

Data Backup and Recovery

All critical work data, including customer data, source code, records, and business documents, must be backed up and fully recoverable when needed.

Applying data protection solutions

User data must be strictly protected, including but not limited to encryption, access control, partitioning, backup/recovery, and monitoring during storage, transmission, and usage.

Data protection at rest

Sensitive and confidential data is encrypted at rest.

Data protection in transit

Sensitive and confidential data is encrypted during transmission over internal networks and the Internet, via HTTPS or VPN.