Security Culture

Our company-wide organizational security policies and procedures include:

• Regular and mandatory training for all employees in security awareness and data privacy.
• All employees must adhere to Datasite's Code of Conduct and Confidentiality Agreements, and affirm these annually.
• Software Engineering staff must also complete annual training in secure coding.
  
• Annual testing of our security incident response. This includes external and internal notifications, escalation procedures and communications criteria.
• Program to allow security researchers to find and inform us of vulnerabilities.
• An Access Management Standard, based on roles and responsibilities, requires quarterly review and documented approval. In the event of termination, access is removed within 24 hours.
• Infrastructure and application penetration testing conducted by an industry-recognized third party.