|
|
Security
EOS is dedicated to providing the best possible service and security for our clients. We apply this client-focused approach to every aspect of our services; that includes investing as much time and attention protecting the security of our clients' data and materials as with any other aspect of our operations.
To that end, EOS has made data and physical plant security a core attribute of our business. This high level of security has been achieved through standard business practices of major data centers and financial institutions, as well as the development of extensive operating procedures and investments in security measures.
The following are specific and detailed aspects of how EOS has addressed security issues in numerous areas.
The keys to maintaining our high level of security and ensuring our continued focus are:
People
- EOS utilizes strict written security protocols that each staff member must adhere to as a condition of his/her employment.
- Visitors' and vendors' access to our premises is highly controlled. Throughout their visits, all guests must be accompanied by employee escorts. Access to any area must include proper authorization for employees and visitors.
- Security background checks are conducted on all new employees.
- All employees are bonded.
Facilities
- Exterior doors are opened only with valid security code. For those few doors not designed to be entered from the outside (such as fire escape accessibility), an alarm sounds whenever they are opened.
- Key production facilities are video and sight monitored 24 hours a day.
- Security partitions at key entrances in production areas allow for deliveries and pick-ups without the need for visitors to access the shop floor.
- All warehousing is done within one central, on-site secured area featuring the same security levels as our production areas.
- Warehouse employees visually inspect all incoming shipments for signs of damage or tampering. Suspect shipments are refused at the door.
- The mailing process is highly automated from production through insertion, with on-site postal facilities minimizing the opportunity for interruption of the delivery process.
Hardware/Software
- All Internet connections are protected by Cisco firewall.
- We employ extensive use of encryption for documents shared on the FTP site.
- All incoming data is secured, processed and held for thirty days before deletion.
- We adhere to strict operational procedures for system authentication, administration and data protection.
- EOS regularly performs audits of systems and infrastructure for compliance with clients' procedures.
Client Audits
Many of EOS's clients operate in highly regulated industries such as health care, financial services and telecommunications. Because security mandates vary among these industries, EOS's operating procedures and processes must address each client's unique needs. EOS regularly performs detailed audits to ensure compliance with governmental requirements and association recommendations in regulating production, storage, communications and other factors.
The rigorous auditing we perform for our clients typically covers the following areas:
- Human Resources Screening and Statistics
- Training Procedures and Documentation
- Insurance, Legal and Liability Coverage
- Operational Workflow Controls
- Materials Management
- Policies, Standards and Procedures
- Management Reporting and Planning
- Access - Physical, Logical and Electronic
- Disaster Recovery Processes and Controls
- Authorization Processes
- Environmental Controls
- Data Management Procedures
- Contingency Planning
|
|
|
