Enterprise Security Assessment > Data and Asset Security > End User Device Security

Do you use personal computers (PCs) to handle Scoped Systems and Data?

book reader icon
1 Minute
11/13/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes, both Windows and MAC OS based personal computers may be used, mostly to transmit and process, sometimes to temporarily store Scoped Data (e.g. during customer support). Scoped Systems are stored on our servers in our partner's ISO 27001-certified data center (Hetzner).

Most of these devices are located within the physical compounds of QR Planet's offices. If necessary, they are connected via remote access in accordance with all relevant internal policies and common best practices.

Last update 1 week ago

Does your system policy require securing active sessions and logoff when the session is finished?

Yes. Any active session and connection to terminals, PCs or servers within QR Planet's environment needs to be secured and completely terminated.

Do you use non-company managed PCs to connect to the company network?

Yes, but only if necessary. This always happens in accordance to our Remote Access, Network Security and Wireless Policies and all relevant security standards.

Do you require communications to be encrypted for all remote connections from external networks to ones containing Scoped Systems and Data?

Yes. Any network access by remote sources, whether the target network contains Scoped Systems and Data or not, needs to be encrypted.

Do you perform remote administration tasks of organizational assets in a manner preventing any unauthorized access?

All possible remote administration of organizational assets is done by pre-approved parties with restricted access as befits their role (RBAC) and requirement.

Do your require encrypted communications for all remote system access?

Yes. Any system access by remote sources needs to be encrypted, as required by our Remote Access and our Network Security Policies.