Snapshot 115564
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Organizational Security • Information Security Program We have an Information Security Program in place that is communicated throughout the organization. Our Information Security Program follows the criteria set forth by HIPAA. PrintComm is SOC 2 Certified. • Third-Party Audits PrintComm undergoes independent third-party assessments to test our security and compliance controls at least annually and we remediate as needed. • Third-Party Penetration Testing We partner with an independent company for penetration testing at least annually and we remediate as needed. • Roles and Responsibilities Roles and responsibilities related to our Information Security Program and the protection of our customer’s data are well defined and documented. Our team members are required to review and accept all security policies. • Security Awareness Training Team members go through security awareness training during onboarding and at least annually after that. • Confidentiality Team members sign and adhere to an industry standard confidentiality agreement prior to their first day of work. • Background Checks We perform background checks as part of our hiring process. Data Security • On Premise Data Security Servers/devices storing customer data on premise are kept in a locked, climate-controlled, video-monitored location. Data is encrypted in transit and at rest. • Vulnerability Scanning We perform vulnerability scanning and actively monitor for threats. • Incident Response We have a process for handling information security events which includes escalation procedures, rapid mitigation and communication. Access Security Where available we use multi-factor authentication (MFA) We follow the principle of least privilege. We perform regular access reviews for all team members authorized to access sensitive systems. Team members adhere to a minimum set of password requirements and complexity for access. Vendor and Risk Management • Annual Risk Assessments We perform risk assessments at least annual to identify any potential threats, including considerations for fraud • Vendor Risk Management Vendor risk is determined and the appropriate vendor reviews are performed prior to authorizing a new vendor. Contact Us If you have any questions, comments or concerns or if you wish to report a potential security issue, please contact security@printcomm.com. Updated: 3-17-2023