|
At Silicus
confidentiality of customer information is safeguarded through
a strong legal framework, logical security practices, and
corporate IT policies in accordance with ISO 27001 framework.
Legal Framework
At a Silicus employee level, Silicus insures that all Intellectual Property is vested in the Customer at the time of creation by having all employees, contractors and affiliates sign the IP Rights Transfer and Confidentiality Agreement Attachment to their Employment Agreement with Silicus. At an organization level, Silicus Technologies, Inc. and Silicus Technologies India Private Limited, jointly enter into legal agreements with Clients with specific verbiage relating to confidentiality, intellectual property ownership (vested with the Client) and work for hire.
- All information that is sensitive including confidential business data of the client is restricted to a limited set of users. Such information is classified as "Silicus Confidential".
- All Silicus Confidential documents are well secured in locked cabinets and never left in the open. When stored in computers, such documents or source code are protected by logical access control mechanisms like "document password", "power on” and “screen saver passwords" for PCs and when stored in servers are in folders that can be accessed only by designated persons (role based access).
Logical Security
- Silicus’ Corporate IT Security manual prescribes processes and procedures related to logical security administration. Silicus has prescribed policy and processes for managing and administering access to Silicus’ system, computer resources and networks
- All the machines are installed and configured by IT Systems Administrators (ITSA).
- No external software can be installed on these machines without ITSA permission.
- All access is based on 'need to know', and is explicitly authorized. The underlying philosophy of providing access is 'everything is forbidden unless expressly permitted'.
- Our Security practices ensure that confidential information is secured from leaving the premises electronically or physically. Please review our security practices for more information.
If you would like to know more about our processes and practices, please contact us. |
|
|