Business Continuity

Are monitoring and detection mechanisms in place to identify activities that may impact information security and business continuity?

Yes, a variety of monitoring solutions are implemented to monitor system events and alert on detected anomalies. Additionally, the company has an internal cybersecurity team conducting regular tests of deployed solutions.

Has a Business Continuity Plan (BCP) and/or Disaster Recovery Plan (DRP) been implemented?

Yes. A Business Continuity Plan has been developed and implemented, regularly tested (at least once a year). Vercom also maintains a DRP. PBI-01 Appendix 03 Business Continuity Plan Schema (BCP).

Is regular testing and evaluation conducted on the effectiveness of implemented organizational and technical measures to ensure an adequate level of processing security?

Yes, as part of annual BCP tests.