Company
Who we areSafety and confidenceEmploymentAcademic licensesContact
Partners
Become a partnerPartners locator
Resources
Resource centerCertification program
EN
ESPT
gss-logo-header
DEMOLOG IN
Security and trust
A relationship of trust begins with transparency in security
  1. Home
  3. Security and trust

Security and trust

From GlobalSUITE Solutions we believe in security as a differentiating element in the search for trust on the part of our customers. That is why our services and processes have been born taking into account this requirement since its design.

Part of this effort has crystallized in having an integrated management system that allows the governance of our processes and is certified in ISO 27001, ISO 22301, ISO 9001, ISO 20000, ISO 37001 and UNE 19601 . This framework provides us with the tools needed to address the organization’s objectives, manage risks, and define the necessary controls.

PHYSICAL SECURITY

Work centresData centers

We have controls in our workplaces that prevent access by unauthorized personnel, both automated and face-to-face. This allows us to provide our services closely without leaving aside security.

Access by non-organizational personnel is under internal supervision, providing limited access in relation to the purpose for which they entered our facilities.

In all our centers we have physical controls that allow the detection of anomalies (CCTV systems, alarms, etc.) and react to them quickly.

INFRASTRUCTURE SECURITY

Network SecurityDetection and prevention
Intruders

Our security strategy in the provision of services follows the principles of defense in depth, applying controls at each of the layers that result in a robust infrastructure on which GlobalSUITE is supported®.

Following this principle, in the first instance, in addition to the controls proposed by the different service providers that connect us to the Internet, we have Perimeter firewalls to prevent unauthorized access, also allowing the segmentation of the different components into separate networks, thus improving the efficiency and security of the information.

Our infrastructure is configured in high availability,to ensure the availability of the service in the event of physical or logical breakdowns. In the same way, active monitoring of all network elements is available to ensure their proper functioning and alert to possible suspicious activities or anomalies.

As an additional protection measure, the architecture has services that enable cleanup, network routing, and filtering to manage attacks from previous layers.

DATA SECURITY

Safety from designData isolationEncryptionData privacy

The platform together with all the functionalities developed for GlobalSUITE® are the consequence of a development process that takes into account security both in the design of the product and in its functionality.

Safety is present at every stage of the system development and design cycle,from defining requirements to validations performed,internally and externally, at the production stage.

An example of this is the integration of the recommendations of the OWASP guide into the different stages that make up the aforementioned cycle, ensuring that the final product does not contain known vulnerabilities.

OPERATIONAL SECURITY

Vulnerability managementBackups and replicationBusiness continuityHardering servers

The organization has a vulnerability management process that allows the implementation of the different changes reported by the manufacturers, as well as configuration failures that could lead to a security problem.

This process has several input activities, such as the detection of possible vulnerabilities by our internal team,an external team that performs periodic audits or by the manufacturers themselves using the communication channels arranged for this purpose.

These reviews are managed internally,also actively analyzing all external security reports and news or communications from stakeholders that could affect the infrastructure or the correct provision of the service.

All detected vulnerabilities, regardless of the origin of these, are prioritized, identified their root cause, put in place a contingency measure as quickly as possible to avoid the possibility of vulnerability, and finally, resolved.

Menu