Data Security
- Our premises are monitored by closed-circuit cameras, and all workstations have disabled CD/DVD writable drives and USB ports to prevent unauthorized data transfer.
- Each computer is protected with up-to-date antivirus and anti-malware software, performing daily and twice-daily scans respectively, along with weekly boot-time and monthly full-system scans.
- Network security is maintained through default Windows firewall configurations, complemented by strict session control policies and automatic device lockouts after inactivity (5 minutes for servers, 10 minutes for workstations).
- All systems require password protection with mandatory password changes every 30 days; user accounts are promptly deactivated upon employee separation, and access rights are regularly reviewed.
- We perform data backups rigorously, including twice-daily previous version backups, weekly differential backups, and monthly full backups to ensure data integrity and availability.
- Use of personal email accounts is prohibited on company devices, and internet access is restricted to approved websites to minimize security risks.
- BAS promotes a paperless workplace to enhance sustainability and strengthen the security of digital data management.
Data Confidentiality
- An access control system is installed at the workplace entrance, regulating entry into the production area.
- Server room access is strictly limited to the IT team, with entry granted only via authorized access cards.
- The document storage area is secured with multiple layers of physical and procedural safeguards.
- Client data access is restricted exclusively to authorized personnel responsible for managing that information.
- We enforce stringent IP authentication protocols to prevent unauthorized external access to confidential organizational data.
Standard Compliances
- ISO 27001:2013 Certified – Demonstrates our commitment to implementing a comprehensive Information Security Management System (ISMS) that safeguards sensitive client and company data against internal and external threats.
- ISO 27001:2022 Compliant – Reflects our alignment with the latest global standards for information security, addressing emerging cyber risks and ensuring continuous improvement in risk management practices.
- ISO 9001:2015 Certified – Validates our Quality Management System (QMS), ensuring we consistently deliver services that meet client expectations and regulatory requirements through structured processes and continual performance monitoring.
- Our ISO certifications ensure that we follow industry-leading practices for data security, process quality, operational efficiency, and regulatory compliance.
- We conduct regular internal audits, risk assessments, and staff training to uphold the requirements of these standards and ensure continuous improvement.
- Our adherence to these globally recognized frameworks assures clients that their data and deliverables are managed with the highest levels of integrity, confidentiality, and professionalism.