Security Policy #
Introduction #
As a small Danish cyber security startup, we recognize the importance of protecting our customers, partners, and the public from cyber threats. This Security Policy outlines our commitment to safeguarding the security of our data, systems, and networks.
General Principles #
1. We are committed to:
- Implementing robust security measures to protect our systems and data from unauthorized access, use, disclosure, disruption, modification, or destruction.
- Maintaining a culture of security awareness among our employees and partners.
- Responding promptly and effectively to security incidents.
- Collaborating with industry partners and authorities to combat cybercrime.
- Data Security
2. We collect and process personal data in accordance with the General Data Protection Regulation (GDPR). Please refer to our GDPR specific policy for further information.
3. We implement a layered security approach to protect our systems and networks from cyber threats. This includes:
- Firewalls
- Intrusion detection and prevention systems (IDS/IPS)
- Vulnerability scanning
- Malware detection and prevention
- Secure coding practices
- Employee Security Awareness
4. We educate our employees on cybersecurity best practices, including:
- Password (passphrase) hygiene
- Phishing awareness
- Social engineering prevention
- Protecting sensitive data
- Reporting suspicious activity
- Security Incident Response
5. We have a comprehensive incident response plan to deal with security breaches. This plan includes:
- Identification of the incident
- Containment of the incident
- Eradication of the threat
- Recovery of affected systems and data
- Notification of affected parties
- Lessons learned and corrective actions
- Collaboration and Reporting
6. We collaborate with industry partners and authorities to address cybercrime. This includes:
- Sharing information about cyber threats
- Participating in cybersecurity research and development
- Supporting law enforcement investigations
- Public Engagement
7. We educate the public about cybersecurity through various channels, including:
- Website and social media
- Speaking engagements
- Workshops and seminars
- Public awareness campaigns
- Update and Review
8. We review and update this Security Policy regularly to reflect changes in our business, technology, and security threats.
Compliance #
9. We comply with all applicable data protection laws and regulations, including the GDPR.
Contact Us #
If you have any questions about this Security Policy or our security practices, please contact the Security Officer