Security Policy
Nectarsonic Unipessoal LDA Security Policy. Last updated: 16-April-2024
This Security Policy outlines the measures implemented by Nectarsonic Unipessoal LDA (referred to as the “Company”, “we”, “us”, or “our”) to protect the confidentiality, integrity, and availability of our systems and data. By engaging with our services, you agree to abide by the guidelines outlined in this Security Policy.
Information Security:
Confidentiality: We recognize the importance of maintaining the confidentiality of sensitive information. Access to confidential data is restricted to authorized personnel only, and all employees are required to sign confidentiality agreements.
Data Encryption: We employ encryption techniques to protect data both in transit and at rest. This includes the use of SSL/TLS protocols for secure communication and encryption algorithms for data storage.
Access Control: Access to our systems and data is controlled through authentication mechanisms such as usernames, passwords, and multi-factor authentication. Access privileges are granted based on the principle of least privilege.
Employee Training: All employees undergo security awareness training to educate them about potential security threats and best practices for maintaining security. Regular training sessions are conducted to keep employees informed about the latest security trends and techniques.
Infrastructure Security:
Network Security: We implement firewalls, intrusion detection/prevention systems, and other network security measures to protect our infrastructure from unauthorized access and malicious activities.
Patch Management: We regularly update and patch our systems and software to address known vulnerabilities and reduce the risk of exploitation by malicious actors.
Backup and Disaster Recovery: We maintain regular backups of our data and have disaster recovery plans in place to ensure business continuity in the event of a security incident or disaster.
Incident Response:
Monitoring and Detection: We continuously monitor our systems and networks for suspicious activities and indicators of compromise. Any potential security incidents are promptly investigated.
Response and Mitigation: In the event of a security incident, we have established procedures for responding to and mitigating the impact of the incident. This includes containment, eradication, and recovery measures to minimize disruption and damage.
Compliance:
Nectarsonic Unipessoal LDA is committed to complying with all applicable laws, regulations, and industry standards governing information security and data protection.
