Network Security

Risely designs controls to protect its networks and the information that flows across them, and to prevent misuse of our information assets and processing facilities. This page summarizes how we manage communication and network security, protect information in transit, and detect unauthorized activity.

Our approach

We manage and control our networks to protect them from threats and to maintain the security of the systems, applications, and information that rely on them, including information in transit.

Network controls

• Networks are managed and controlled to protect them from threats and to maintain the security of the systems and applications that use them, including information in transit.
• Network-based intrusion prevention and detection systems are deployed, wherever possible, to cover critical network segments within our infrastructure.
• Infrastructure and software exposed to untrusted or semi-trusted networks, such as internet-facing systems, are protected by firewalls, intrusion prevention systems, limited connectivity, and encryption.
• Any system deployed on the internet must go through a thorough vulnerability check.
• All configurations are performed by trained and authorized personnel, and any changes to network configurations follow our operations security procedures.
• Vulnerability assessments of these infrastructure elements are carried out every year.
• All end-user systems connecting to Risely infrastructure must have baseline security implemented.

Information transfer

• Information transfer guidelines are captured in our Data Classification Policy and asset management procedures, and users are made aware of them.
• Acceptable use standards define guidelines for the appropriate use of communication facilities.
• Anti-malware controls detect and prevent malware that could be transmitted through electronic communication channels.
• We treat correspondence sent through Risely email systems as confidential.
• We protect and control the exchange of critical business information and software with third parties and outside organizations, to prevent loss, modification, destruction, or misuse of information.
• Where feasible, we may implement web filtering mechanisms to restrict access to external networks and websites in line with our policies.

Electronic messaging

• Information involved in electronic messaging, such as email and instant messaging, is protected from unauthorized access, modification, or denial of service.
• Public email accounts are not used for conducting Risely operations unless authorized.
• Forwarding of Risely mailboxes to public or non-Risely email accounts is governed by our Data Classification Policy.

Confidentiality agreements

• We identify and maintain confidentiality or non-disclosure agreements with all third parties, based on the criticality of the information to be protected. These requirements are reviewed at least once a year and whenever the business environment, legal requirements, or contractual obligations change.
• Confidentiality and non-disclosure agreements comply with the applicable laws and regulations of the jurisdictions to which they apply.
• Staff members and contract partners sign and comply with a non-disclosure agreement where applicable.

Questions

If you have any questions about this policy, contact us at [email protected].