Bynder Security and Compliance

Bynder currently holds the following certifications and complies to the following requirements:

We monitor our security procedures on a regular basis and have the following alerts in place so that immediate action can be taken:

Security policies are documented in our Information Security Management System (ISMS) control document, are approved by the management, and enforced continuously through monitoring and internal audits. All changes to policies are communicated, and trainings are provided to make sure everyone keeps abreast of the requirements.

Bynder information security strategy is reviewed annually by Chief Information Security Officer, and is translated into Bynder information security policy (ISP). Additionally, any contracts with third parties require conformity with Bynder security policies. Third parties must provide assurance (certification or an evidenced strong internal security program) of actively protecting their customers’ data or results from recent penetration tests. Additionally, third parties must accept liability for any incidents and sign acceptance against our ISP.

We have clear incident response procedures and incident handling and escalation procedures in place. For the top 10 identified risks we have a clear response plan ready, also there’s a fallback incident escalation plan for situations that do not fit the previously identified risks.

Bynder Infrastructure Design defines the used security levels and networks used internally. NAT is implemented in out environment to hide the internal network from the Internet, and all the external connections are approved in the course of a formal procedure. Additionally, as required by our ISO27001:2013 implementation, we perform vulnerability assessments or penetration tests on your Internet-facing connections at least once a year and after any significant modifications.

The firewall rules are reviewed monthly, and firewall logs and IDS logs are used for qualification. Logs are retained indefinitely and are checked continuously and automatically for malicious behavior.

Policies and procedures are established, supporting business processes and technical measures implemented, to protect wireless network environments, including the following: