...
All information systems developed and/or controlled by Triplics Ltd ecoPortal which store or transmit confidential data.
| Info |
|---|
For any questions relating to this document or our Security & Privacy, please contact us at issues@ecoportal.co.nz |
...
Policy
Triplics Ltd ecoPortal shall evaluate the risks inherent in processing and storing data, and shall implement cryptographic controls to mitigate those risks where deemed appropriate. Where encryption is in use, strong cryptography with associated key management processes and procedures shall be implemented and documented. All encryption shall be performed in accordance with industry standards, including NIST SP 800-57.
For all personal data, Triplics Ltd ecoPortal shall consider the state of the art, the costs of implementation and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity to the rights and freedoms of natural persons, and implement appropriate technical and organizational measures surrounding the pseudonymization and encryption of data to ensure a level of security appropriate to the risk.
...