Security Domains

Security Awareness: Salto Systems conducts regular awareness campaigns across the organisation to prevent and mitigate users’ risks.

Physical Security: Salto Systems protects its facilities using appropriate access control systems to restrict access to authorised personnel. In addition, secure areas such as data centers have additional protection measures against environmental threats.

Security Incidents: Salto Systems maintains incident response plans including personal data breach management.

Access Control: Salto Systems implements appropriate access control to ensure access to the applications and systems in general is restricted according to least privilege and need to know principles. All personnel access Salto System’s systems with a unique identifier (user ID). In case personnel leave the company, their access rights are revoked.

Network Security: Salto Systems employs encrypted and authenticated connections for connecting to platforms and systems in general by using security capabilities such as firewalls, VPN and authentication mechanisms.

Secure workstations: Salto Systems implements appropriate protection over end user’s devices such as advanced antimalware protection, hard disk encryption and appropriate patch levels.

Privacy and Security by design: Salto Systems applies privacy and security by design principles when adopting a new system or enhancing an existing one. This also includes a secure SDLC when it comes to developing software or products.

Vulnerability Management: Salto Systems conducts security reviews on periodic basics and remediate the identified vulnerabilities in order to maintain platforms secure.

Resiliency: Salto Systems adopts backup and disaster recovery plans for adverse situations.

Assurance: Salto Systems conducts regular reviews to ensure compliance with the security policies and standards.