Security / trust page — Sourcepoint

Cited by

Facts read from this source

• Dedicated team Report an error

  “Sourcepoint’s Chief Privacy Counsel and Information Security Director bring an excess of thirty five years of professional experience”

• Training Report an error

  “Security and privacy awareness are conducted at least once per calendar year. Sourcepoint staff participate in training as part of onboarding and as often as quarterly thereafter.”

• Penetration testing Report an error

  “annual penetration testing conducted by independent third party, network and application vulnerability scanning, and monthly patching of high and critical severity vulnerabilities”

• Malware prevention Report an error

  “User endpoints are configured to run with corporate approved anti-malware solutions that are regularly updated.”

• Log retention Report an error

  “Except where adherence to regulatory guidelines suggests otherwise, logs from production systems are retained for a minimum of 90 days.”

• Incident management Report an error

  “Sourcepoint has a documented Incident Response program that includes at least annual training of all staff on their responsibilities to report security weaknesses and vulnerabilities.”

• Access control Report an error

  “Strong authentication including multi-factor authentication, breached password detection and quarterly access reviews, minimize the chance for unauthorized access to protected resources.”

• Third party risk Report an error

  “Sourcepoint vendors and suppliers are evaluated in accordance with Sourcepoint’s security and privacy standards, always considering use cases and data accessed or processed.”

• Secure development Report an error

  “All application code is peer reviewed for quality and security. Web applications developed with secure coding best practices including, but not limited to, preventing the OWASP Top 10 application security risks.”

• Change management Report an error

  “All system, application or network changes at Sourcepoint are subject change management review and approval.”

• Backups Report an error

  “At least once per day full backups of databases are conducted. Backups are stored encrypted and retained for no more than thirteen months.”

• Business continuity Report an error

  “Business Continuity plans are reviewed and tested at least once annually. Production environments are often hosted across multiple availability zones”

• Certifications Report an error

  “Sourcepoint maintains certification to ISO/IEC 27001 and 27701 standards, of which it is audited against annually.”

• Data minimization Report an error

  “Sourcepoint makes every effort to limit collection and retention of PII to the minimum elements required. Sourcepoint leverages anonymization and de-identification techniques”

• Processor role Report an error

  “Sourcepoint in its role as a Data Importer and Processor will process IP addresses for the purpose of determining the location of our clients property visitors.”

• Security contact Report an error

  “privacy related inquiries should be directed to privacy@sourcepoint.com.”

Scores citing this record

• The Agency Developer Consent records & proof
• The Agency Developer European sovereignty
• The Data Protection Officer Consent records & proof
• The Data Protection Officer European sovereignty
• The In-House Lawyer Banner & choice architecture
• The In-House Lawyer Consent records & proof
• The In-House Lawyer European sovereignty
• The Publisher Marketing Lead Consent records & proof
• The Publisher Marketing Lead European sovereignty
• The Skeptic Banner & choice architecture
• The Skeptic Consent records & proof
• The Skeptic European sovereignty
• The WordPress Webmaster Consent records & proof
• The WordPress Webmaster European sovereignty