CompuSystems has implemented and will maintain appropriate technical and organizational security measures. These measures are intended to protect Personal Data against accidental or unauthorized loss, destruction, alteration, disclosure or access.
CompuSystems will adhere to the following technical and organizational security measures:
- CompuSystems will take all reasonable measures to control who gets to access personal data.
CompuSystems will take all reasonable measures to:
- Devise proper access controls including, physical access controls, and restrict personal data access.
- Grant personal data handling access only to privileged users.
- CompuSystems will take all reasonable measures to audit user behavior.
CompuSystems will take all reasonable measures to keep track when users:
- Access our personal data storage platform (whether that is a server, database, or cloud application).
- Alter personal data (e.g. modify, delete, or rename files).
- Perform access modifications, permission changes, and privilege escalations with respect to personal data access.
- CompuSystems will take all reasonable measures to get real-time insights.
CompuSystems will take all reasonable measures to ensure that a notification system is established that notifies CompuSystems in real-time about any abnormal or suspicious activities such as personal data deletion.
- CompuSystems will take all reasonable measures to retain backup data.
- In the event of data loss, CompuSystems will take all reasonable measures to restore personal data.
- CompuSystems will take all reasonable measures to ensure that backups are protected from tampering.
