Company Partners EN GlobalSUITE® Advisory & Auditing Industries Other services Resources Demo Log in Security and trust A relationship of trust begins with transparency in security Física Infraestructura Datos Operativa HomeSecurity and trust Security and trust From GlobalSUITE Solutions we believe in security as a differentiating element in the search for trust on the part of our customers. That is why our services and processes have been born taking into account this requirement since its design. Part of this effort has crystallized in having an integrated management system that allows the governance of our processes and is certified in ISO 27001, ISO 22301, ISO 9001, ISO 20000, ISO 37001 and UNE 19601 . This framework provides us with the tools needed to address the organization’s objectives, manage risks, and define the necessary controls. PHYSICAL SECURITY Work centres Data centers We have controls in our workplaces that prevent access by unauthorized personnel, both automated and face-to-face. This allows us to provide our services closely without leaving aside security. Access by non-organizational personnel is under internal supervision, providing limited access in relation to the purpose for which they entered our facilities. In all our centers we have physical controls that allow the detection of anomalies (CCTV systems, alarms, etc.) and react to them quickly. INFRASTRUCTURE SECURITY Network Security Detection and prevention Intruders Our security strategy in the provision of services follows the principles of defense in depth, applying controls at each of the layers that result in a robust infrastructure on which GlobalSUITE is supported®. Following this principle, in the first instance, in addition to the controls proposed by the different service providers that connect us to the Internet, we have Perimeter firewalls to prevent unauthorized access, also allowing the segmentation of the different components into separate networks, thus improving the efficiency and security of the information. Our infrastructure is configured in high availability,to ensure the availability of the service in the event of physical or logical breakdowns. In the same way, active monitoring of all network elements is available to ensure their proper functioning and alert to possible suspicious activities or anomalies. As an additional protection measure, the architecture has services that enable cleanup, network routing, and filtering to manage attacks from previous layers. DATA SECURITY Safety from design Data isolation Encryption Data privacy The platform together with all the functionalities developed for GlobalSUITE® are the consequence of a development process that takes into account security both in the design of the product and in its functionality. Safety is present at every stage of the system development and design cycle,from defining requirements to validations performed,internally and externally, at the production stage. An example of this is the integration of the recommendations of the OWASP guide into the different stages that make up the aforementioned cycle, ensuring that the final product does not contain known vulnerabilities. OPERATIONAL SECURITY Vulnerability management Backups and replication Business continuity Hardering servers The organization has a vulnerability management process that allows the implementation of the different changes reported by the manufacturers, as well as configuration failures that could lead to a security problem. This process has several input activities, such as the detection of possible vulnerabilities by our internal team,an external team that performs periodic audits or by the manufacturers themselves using the communication channels arranged for this purpose. These reviews are managed internally,also actively analyzing all external security reports and news or communications from stakeholders that could affect the infrastructure or the correct provision of the service. All detected vulnerabilities, regardless of the origin of these, are prioritized, identified their root cause, put in place a contingency measure as quickly as possible to avoid the possibility of vulnerability, and finally, resolved. The GRC solution to optimize your processes of risk, security, continuity, audit and compliance in your business Request a DemoMore information Software GDPR Software Compliance Software Information Security Software Business Continuity Software Risk Management Software Consulting ISO 27001 ISO 31000 ISO 22301 ISO 37001 ISO 9001 ISO 14001 ISO 45001 ISO 28000 GDPR Resources Blog Webinars Security and trust Certification Program GlobalSUITE® Consultant GlobalSUITE® Consultant & Continuity GlobalSUITE® Consultant & Audit GlobalSUITE® Expert Select country EN Global offices Cookies Policy Legal Notice Privacy Policy Mgt System Policies Code of Ethics & Conduct Whistleblower channel © 2020 Copyright © GlobalSUITE solutions