Controls
Here are the controls implemented at MotivIT, LLC to ensure compliance, as a part of our security program.
Product security (1)
Situational Awareness For Incidents
Entity maintains a record of information security incidents, its investigation, and the response plan that was executed in accordance with the policy and procedure defined to report and manage incidents.
Network security (1)
Transmission Confidentiality
Entity has set up processes to utilize standard encryption methods, including HTTPS with the TLS algorithm, to keep transmitted data confidential.
App security (2)
Conspicuous Link To Privacy Notice
Entity displays the most current information about its services on its website, which is accessible to its customers.
Approval of Changes
Entity has established procedures for approval when implementing changes to the operating environment.
Endpoint security (1)
Malicious Code Protection (Anti-Malware)
Where applicable, Entity ensures that endpoints with access to critical servers or data must be protected by malware-protection software.
Corporate security (5)
Security & Privacy Awareness
Entity provides information security and privacy training to staff that is relevant to their job function.
Automated Reporting
Entity has provided information to employees, via various Information Security Policies/procedures, on how to report failures, incidents, concerns, or other complaints related to the services or systems provided by the entity in the event there are problems.
Incident Reporting Assistance
Entity has provided information to customers on how to report failures, incidents, concerns, or other complaints related to the services or systems provided by the Entity in the event there are problems.
Assigned Cybersecurity & Privacy Responsibilities
Entity's Senior Management assigns the role of Information Security Officer who is delegated to centrally manage, coordinate, develop, implement, and maintain an enterprise-wide cybersecurity and privacy program.
Asset Ownership Assignment
Entity has set up mechanisms to assign and manage asset ownership responsibilities and establish a common understanding of asset protection requirements.
