Security / trust page — memoQ

Cited by

Facts read from this source

• ISO 27001 certification Report an error

  “memoQ has decided to maintain a certification to ISO 27001, so that independent third parties—authorized certification bodies—can always validate the effective adoption of information security best practices.”

• ISMS basis Report an error

  “memoQ has implemented an ISMS based on ISO 27001.”

• Policy last updated Report an error

  “Last updated on July 13, 2022”

• Policy valid from Report an error

  “Valid from: July 13, 2022”

• Annual independent review Report an error

  “memoQ has an annual independent review of information security and regular technical compliance reviews.”

• Roles ciso Report an error

  “Chief Information Security Officer (CISO)”

• Roles compliance officer Report an error

  “Compliance Officer”

• Roles internal auditor Report an error

  “Internal Information Security Auditor (IISA)”

• Roles isgt Report an error

  “The ISGT defines information security strategy and policies for memoQ.”

• Security training annual Report an error

  “Mandatory cybersecurity training is provided at least once a year for all stakeholders who receive access to the memoQ data infrastructure.”

• Attack simulations Report an error

  “memoQ periodically conducts simulations or walkthroughs of a cyber-attack, so that individuals responsible for identifying and managing Security Incidents receive proper training.”

• Asset management Report an error

  “memoQ has a documented asset management procedure and maintains an asset inventory, which is accurate, up to date and aligned with other inventories.”

• Information classification Report an error

  “memoQ established an information classification and labeling scheme to ensure that every item of information receives the level of protection that is appropriate for its importance to memoQ.”

• Access management Report an error

  “memoQ maintains a documented onboarding and offboarding procedure, which includes a formal user registration and de-registration process to enable assignment (or revocation) of access rights, unique IDs for all users, a periodic review of access rights with owners of the information systems or services, restrictions and control of privileged access rights by management, an authorization process to allocate and control privileged access rights, quarterly review of privileged access, password requirements (such as minimum length, complexity, periodicity to change, password history), and encrypted passwords in store and transmit.”

• Access revocation on termination Report an error

  “memoQ established, maintains, and follows process to revoke user access when the user’s employment or other contractual relationship terminates, expires, or otherwise ends.”

• Cryptography policy Report an error

  “Cryptography requirements are described in a policy on the use of cryptographic controls, and key management.”

• Physical security Report an error

  “memoQ enforces well-defined security perimeters to protect the organization’s sensitive or critical information and information processing facilities.”

• Clear desk policy Report an error

  “memoQ developed and implemented a clear desk and clear screen policy.”

• Configuration management Report an error

  “memoQ uses system-specific configuration management tools (such as Active Directory Group Policy for Microsoft Windows environments) that automatically enforce and redeploy configuration settings to systems at regularly scheduled intervals.”

• Anti malware Report an error

  “Anti-malware software is deployed on all endpoints within the organization.”

• Environment separation Report an error

  “Separate environments are maintained for production and non-production systems.”

• Backup testing Report an error

  “Data in backup storage are tested on a regular basis by performing a data restoration process to ensure that the backup procedure is working properly.”

• Change management Report an error

  “There is a change management process and procedure to manage and control changes to production applications and infrastructure.”

• Firewall protection Report an error

  “memoQ has a firewall protection for all systems and internet connectivity; VPN and/or encryption for sensitive information that would otherwise pass over public networks.”

• MFA enforced Report an error

  “Multi-factor authentication is also enforced for all user accounts.”

• Network segmentation Report an error

  “An internal network segmentation scheme has been implemented to limit traffic to only those services needed for business use across memoQ’s internal network.”

• Ntp time sync Report an error

  “Synchronized time sources are used (e.g., Network Time Protocol: NTP) from which all servers and network equipment retrieve authoritative time information on a regular basis to ensure that timestamps in logs are consistent.”

• Network logging Report an error

  “Network boundary devices (including firewalls, inbound and outbound proxies) are configured to log traffic.”

• Secure development Report an error

  “Prior to deployment, internally developed application software is tested for coding errors and vulnerabilities. All source code is centrally managed and retained in a source code repository.”

• Supplier security policy Report an error

  “memoQ maintains a supplier information security policy to mitigate and document the risks associated with supplier’s access to the organization’s assets.”

• Incident management Report an error

  “memoQ’s information security incident response plan includes methods for the analysis of events and the criteria for determining if the event should be escalated to become an incident.”

• Evidence procedures Report an error

  “memoQ defines and applies procedures for the identification, collection, acquisition, and preservation of information that may serve as evidence.”

• Business continuity Report an error

  “memoQ established, documented, implemented and maintains processes and controls to ensure the required level of continuity for information security (e.g. logging, access control) during an adverse situation.”

• Business continuity tests Report an error

  “memoQ regularly conducts business continuity tests that cover the testing of information security requirements as well.”

Scores citing this record

• The App Developer Confidentiality of translated content
• The App Developer European sovereignty
• The Data Protection Officer Confidentiality of translated content
• The Data Protection Officer European sovereignty
• The In-House Document Translator Confidentiality of translated content
• The In-House Document Translator European sovereignty
• The E-Commerce Marketer Confidentiality of translated content
• The Localization Manager Confidentiality of translated content
• The Localization Manager European sovereignty
• The Skeptic Confidentiality of translated content