www.thefoghatbooks.com

Financial Services Outsourcing: Security Policy

Hosted Web Servers for Financial Services Outsourcing

The The FOG Hat Books web servers are housed and managed by our sister concern Webworld Experts at their hosting center in USA. The said company facility utilizes completely secured monitoring systems permitting The FOG Hat Books to achieve a high level of security for secure financial services outsourcing to India. The secured servers and firewall are monitored at 24/7 basis. Through weekly patch management, Webworld Experts constantly updating the security software to protect against unauthorized access to our network systems.

The The FOG Hat Books password protected logins restrict access to registered users. User passwords are invariably encrypted in the SQL database and a log is maintained of all users that access the system. The The FOG Hat Books Tax Center uses 128-bit Secure Socket Layer encryption for all data transfers. You can imagine the seriousness given to the security of financial services outsourcing from the fact that the same encryption technology is used by banks for securing online banking transactions.

Non-disclosure / Confidentiality Agreements:

All The FOG Hat Books employees in India are to sign non-disclosure/confidentiality agreements. Each employee is bound by the agreement and not allowed to share information from engagements with anybody nor are they allowed to share the information with the co employees unless there is a question related to the preparation of the engagement. Preparers and reviewers are allowed to share information only through their direct supervisors.

Secure Service Centers for Financial Services Outsourcing

The FOG Hat Books has in place a comprehensive service center security policy that is implemented to ensure secure financial services outsourcing. The security measures adopted include:
1. Restricted physical access to the processing and server environments.
2. Ensure a paperless system so data can not be removed from the facility.
3. Virtually restrict internet access on the computers used in operation and data retrieval and transmission is done under the supervision of the project manager. Further, medialess computers ensure files can not be copied and Outlook has been removed from all PC’s.

Physical Security :

• A security guard is available at the entrance.
• Access card required before entering the server room. Access is restricted to only dedicated employees who are allocated the outsourced activities.
• Returns are prepared in a paperless environment and no source documents, accounting data or tax returns are printed.
• The printer in the server room is limited to printing only the management reports.

Personal Belongings :

• Briefcases, bags and other personal belongings of the employees are not allowed in the service center.
• There are no removable media devices and the PC’s do not have floppy drives or CD R/W drives