At NDS we take information security very seriously. In fact we are positively paranoid about it. We are in full compliance with all major standards required by the industries we serve. These include:
- HIPAA (Health Insurance Portability and Accountability Act)
- BS 27799 (ISO 27799)
- PCI (credit & debit card data security)
- SSAE 16 (financial services)
Our controls meet the guidelines of these standards. Audits conducted by highly reputable third parties such as Ernst & Young verify that our commitments on paper are fulfilled in reality.
What we do?
Our comprehensive security measures cover:
- Physical Safety
- Administrative Security
- Technical Security
Before we undertake any assignment, we understand the potential risks to your data security.
Then we define security policies and procedures required by the standards and best practices of the relevant industry and geographical location.
Enforcement is entrusted to a dedicated IS Officer whose sole responsibility is to monitor the whole organization’s adherence to our defined security policies and procedures.
Every employee must pass a background check, and undergo data security awareness training. Employees are informed about their responsibilities, as well as the penalties resulting from violation of these protocols and procedures. Access to specific data is granted only as required by an employee’s role and assigned tasks.
Multiple levels of redundancy safeguard the continuous functioning of our IT infrastructure. State-of-the-art power systems and HVAC, multiple backup generators and UPS devices, fire alarms, CCTV and access control systems all guarantee uninterrupted operation, while within our IT systems themselves, the integrity of your data is ensured by industry-standard firewalls and encryption.
Additional security is provided by our disaster recovery planning. We work with every new client to understand how the processes they entrust to us fit into their own businesses, and together we design a disaster recovery plan centered on our ability to provide services from multiple delivery centers. We constantly re-assess and test your plan to ensure that your operations will never be threatened.
What does all this mean for you? The peace of mind of knowing that your organization has guaranteed business continuity and that in the unlikely event of a problem, your data and functionality will quickly be restored with the minimum of disruption.
