Global Accounting Firm is a company which is managed by professionals including Information Security professionals. We take data security and its management to safeguard our clients' privacy very seriously. The security, availability, and integrity of the data you sent to us is our highest priority, we are using state of the art software and hardware technologies to mange our client's data securely. We have a documented policy for the security of data and all our employees are rigorously trained in BBB Security & Privacy standards and they follow them in their daily accounting tasks while dealing with our customer's data
Firewall
Our entire network is protected by Firewall to enable us to control all the outbound and inbound Internet traffic by capturing both outgoing and incoming data. This gives us full control of data and also enables us to audit all our network traffic periodically to find potential problems and intrusions.
Vulnerability Assessment and Intrusion Protection
Proactive vulnerability scanning is performed periodically to make sure the firewall's demilitarized zone is intact.
Use of updated Anti-Virus softwares for protection against malicious software
All our computer systems have been installed with anti virus software with centralized control that enables us to perform real-time scans of all the computers in the office to make sure that all the computers are protected from malicious software and spyware.
Access Controls
We use state of the art Logical Access Controls, where only authorized staff is allowed to access particular data. Our office has physical access controls and only authorized personnel are allowed to enter in the work area. The software and data are shared with the staff strictly on a 'need-to-have-basis'.
Our Employees' Commitment to Customer Security
Our corporate policies outline our expectations for our employees and their commitment to data security in detail. These policies address all activities that have an impact on the security of our service and your data. In addition, our policies and security practices are regularly reviewed in order to keep both human and system resources up-to-date.
Other Internal Controls
To strengthen the security environment within the organization and to protect the confidentiality of clients' data we have employed following internal controls:
- None of the systems have a CD / DVD writer, and all USB Drives or floppy disks are de-activated, so there is no way that any staff can copy any data.
- All the systems have two entry level passwords - one system password, and then, one windows password. These passwords are changed periodically.
- Any printouts taken of the scanned documents are destroyed within the office premises in a shredder.
- Once the client documents are processed, and the same are approved by the client and the accounts are finalized, the electronic copy of the documents in our system are also destroyed and erased from the system itself.
- With all the clients, we also sign up a NDA and a Confidentiality agreement.
