Security & anonymity assurance — found from sitemap — SAI360 Whistleblower Hotline

Cited by

Facts read from this source

• ISMS Report an error

  “SAI360 maintains a comprehensive Information Security Management System (ISMS), which include the Privacy Information Management System (PIMS) to mitigate risks for our customers”

• ISO 27001 Report an error

  “SAI360 and our information security program is ISO 27001:2022 certified with continuous monitoring and improvement processes”

• Certifications list Report an error

  “ISO 27001:2022 Certification SAI360 ISMS for the organization, including the development and support services SOC 1 Type II Report SOC 2 Type II Report HIPAA Attestation SAI360 Compliance SAI360 GRC Core Digital Risk”

• SOC 2 hitrust Report an error

  “SOC 2 Type II + HITRUST CSF Report SAI360 Compliance USA”

• Pentest Report an error

  “External penetration testing through a CREST certified third-party which is performed on an annual basis to provide objective reviews and independent testing reports.”

• Encryption transit Report an error

  “Encryption of data in transit is enforced, applying current market standards such as TLS based encryption (TLS2 or higher with 2048-bit RSA private keys using 256-bit encryption strength (SHA2).”

• Encryption rest Report an error

  “Encryption of data at rest is enforced using AES-256.”

• MFA Report an error

  “Multi-factor authentication administration security to manage servers and access network.”

• Tenant isolation Report an error

  “The cloud tenant isolation is entirely account-based with segregated data storage and encryption from non-risk workloads.”

• Sdlc testing Report an error

  “Application security assessments include static and dynamic code analysis (DAST/SAST) and software composition analysis as part of the software development life cycle (SDLC) prior to releasing to production.”

• Cloud tools Report an error

  “Web Application Firewalls, DDoS Mitigation, Virtual Private Cloud access control and more utilizing tools like AWS GuardDuty, Google Cloud Armor, and NextGen Firewall Integration”

• Providers Report an error

  “Additional Cloud Security Controls are leveraged through services provided by leading security solution providers and the Cloud Infrastructure Providers”

• Network architecture Report an error

  “A multi-tier network architecture design provides a data-flow restricted network, where the access depends upon the workload classification”

• Address Report an error

  “325 N La Salle Dr Suite 675 Chicago, IL 60654 (312) 546-4500”

• Entity Report an error

  “© Copyright | All rights reserved | SAI360 INC.”

• Data privacy laws Report an error

  “It complies with applicable data protection and privacy laws.”

Scores citing this record

• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer European sovereignty
• The Group Counsel Security & anonymity assurance
• The Group Counsel European sovereignty
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate European sovereignty
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor European sovereignty
• The Skeptic Security & anonymity assurance
• The Skeptic European sovereignty
• The SME Operator Security & anonymity assurance
• The SME Operator European sovereignty