360° Information Security and Confidentiality Assurance at O2I

O2I takes security and confidentiality of client information very seriously and that is why we have implemented stringent security safeguards and processes for every information touch-point. Since our processes are clear and well-defined, we are able to immediately detect and handle any information breach and provide 360° security.

Our security process comprises four stages: Planning, Protection, Detection, and Response. These four stages drill down to all security aspects related to People, Technology, Physical, and Network infrastructures.

Physical Security

• Security personnel man our centers 24/7
• Stringent electronic smart card access control for all employees/visitors who enter our premises
• Additional access control devices and CCTV monitoring systems to restrict unauthorized entry into our centers
• Fire prevention and disaster evacuation plans and procedures for minimum damage

People and Culture

• Adequately trained teams which understand clients' security requirements
• Legally binding confidentiality agreements for all staff members
• Information is shared only with people involved directly in the project, on only need-to-know basis
• O2I ensures staff's awareness and sensitivity towards security issues and imparts special training for clients where additional security is required

Technology

• Technology-driven detection systems to ensure complete data security
• No external drives on the systems to prevent data theft by the staff
• Back-Up Drive Management for all workstations with restricted print permissions to prevent misuse
• Well-maintained audit trails for all our system activities including internet usage
• Network and Windows Login, PC 'locking' and secure email with digital signatures
• Single sign-in to enterprise and desktop applications
• 100% redundancy for business continuity:
  • Internet redundancy through Marine Optic Fiber Cable (Trans-Atlantic and Trans-Pacific), and satellite communication
  • Power redundancy through power failover system, UPS and power generators

Network Security

• Totally secured VPN Network with CISCO VPN Tunnel to Client, to block all Peers from Peeping in
• Secured Cisco® Intelligent switches and Cisco® Network Assistant optimized for LAN along with Cisco® PIX® Firewall to block all ports for HTTP, FTP, TCP/IP, UDP and even ICMP
• Facilities for administrative monitoring, auditing and reporting to secure data at every stage
• No hardware resources available on the network
• Workstations and networks are secured by antivirus, anti-malware, anti-phishing, spam blockers, URL filters, and other standard protections

Security Management Process at Outsource2india

Plan

1

• Systems
• Process
• Training
• Documentation
• Awareness

Protect

2

• Identification
• Authorization
• Confidentiality
• Integrity
• Enforcement

Detect

3

• Accountability
• Audit
• Intrusion Detection
• Non Repudiation
• Availability

Respond

4

• Triage
• Recovery
• Reliability
• Corrective Action
• Improvement

Learn more about our secure Infrastructure and Transition Management Process.