The era of information technology has ushered in tremendous possibilities for an outsourcing firm to bring the world closer. However, this explosion of the technology sphere can cut both ways when it comes to security issues. As much as it arms us with the power of information at our finger tips, it also brings in a whole series of vulnerabilities with regard to preventing data from being breached and reaching wrong hands.
Wifi-spying, packet sniffing, insider trading and piggybacking, the threat is real and the list of security issues is endless. GAIA realizes that a purely technological approach to dealing with the new world of IT security is unlikely succeed. Our IT security policy involve fundamentally changing common business processes & practices in entirety and insulate our environment, people and system from being susceptible to IT breaches.
Whether it is credit card information or social security numbers, our global clients entrust us with information so confidential, that it is sacrilegious for any pair of eyes other than the ones it is meant for, to access them. We create multiple level cordons to filter access to information.
GAIA provides for the following security measures:
- Secure work areas
- Multiple levels of network security
- Information exchange on a need-to-know basis
- Employee NDA's strictly enforceable according to the laws of the land.
- High availability and high performance firewalls for securing parameters.
- Remote user authentication using a 2-factor authentication system.
Additionally, inbound and outbound monitoring on all data transfer mechanisms and all email systems is done using the finest of anti virus software. Any change to information system and network environment is controlled through a formal documented change control process. Our Incident Management Process is detailed along with roles, responsibilities and procedures to ensure an appropriate response to IT incidents including security. Access to information and business processes is controlled on the basis of business and security requirements. We have developed procedures in the form of access policy statement defining the access controls to be assigned to users or group of users.
Gaia is committed to respecting, protecting and safeguarding privacy and confidentiality of data and information entrusted to it by its customers. In addition, GAIA has implemented a rigorous set of standard operating procedures that are designed to provide our clients with the requisite privacy and security. Not surprisingly, we have consistently achieved the trust and confidence of our clients.