Velaris Security Portal

As a SaaS vendor selling to an enterprise test, what type of data do you need access to?

What is the potential impact to your enterprise customer if the data and/or functionality you, as the vendor, are supposed to manage, is compromised?

What is your recovery time objective in case of critical failure? (e.g., your DB is deleted)
‍

What is your recovery point objective in case of critical failure? (e.g., your DB is deleted)

Will your product be a system that your enterprise customer critically depends on? (i.e., a failure would cost them a ton of money)

Are you also using other third-party services to manage or support your customers?

Are you hosted only on one of the major cloud providers or do you have any on-premise systems?

Acceptable Use Policy for outlines the rules and guidelines employees must follow when using the company's IT resources, including computers, networks, and data, to ensure security, compliance, and responsible usage.

Access Control Policy defines the procedures and guidelines for granting, managing, and revoking access to company systems and data to ensure only authorized personnel have access.

Asset Management Policy establishes the framework for tracking, managing, and protecting the company’s physical and digital assets throughout their lifecycle.

Data Management Policy outlines the standards and practices for collecting, storing, processing, and protecting company data to ensure its integrity, availability, and confidentiality.

Business Continuity Policy details the strategies and plans to ensure the company can continue critical operations during and after a disruption or disaster.

Operational Security Policy sets forth the guidelines for maintaining the security of the company’s operational environment, including the protection of information systems and processes.

Cryptography Policy outlines the use and management of cryptographic methods and tools to protect sensitive company information from unauthorized access and disclosure.

Information Security Policy establishes the framework for protecting the confidentiality, integrity, and availability of company information against threats and vulnerabilities.

Third Party Management Policy defines the requirements and procedures for managing the risks associated with engaging third-party vendors and partners.

Cloud Security Policy sets the standards for securing data, applications, and services that are hosted in the cloud to ensure compliance with company security requirements.

Physical Security Policy outlines the measures and procedures for protecting the company’s physical premises, assets, and personnel from physical threats and unauthorized access.

Risk Management Policy defines the process for identifying, assessing, mitigating, and monitoring risks that could impact the company’s operations and objectives.

Secure Development Policy establishes the guidelines for incorporating security practices throughout the software development lifecycle to ensure the creation of secure and resilient applications.