 |
|
|
|
- Protect your customers, your company, and yourself
In today's environment, protecting your customers' information, protecting your company, and protecting
yourself must be paramount when selecting a vendor. Today's marketing expert needs a vendor that is in
compliance with all government requirements for data and physical security. A data breach can cause irreparable
damage to your company's image. Your institutional controls are in place, but what about your vendors'?
Can you trust them with your customer data? What about your reputation?
- Lowest price does not mean best price
At midwest web, inc you can feel confident that we understand the importance of protecting your customer
information by implementing strict security standards in accordance with NIST, ISO17799, COBIT, and the Center
for Information Security.
- Vendor Selection means Vendor Due Dilligence
Without a thorough vendor selection process, lowest price is not necessarily the best price. What is vendor
due dilligence? Vendor due dilligence is a checklist of requirements that all vendors are measured against
which would provide necessary documentation before work is awarded. Vendor due dilligence security risk
assessment forms are available upon request.
- SAS70
midwest web, inc has completed our SAS70 information security process
evaluation. SAS70 is an independent audit, generally performed by public accounting firms, and is an exhaustive
examination of information security and corporate internals controls. It is an on-going process of testing
defined controls and issuing a statement of audit regarding security compliance and integrity on an annual
basis.
- CISSP
midwest web, inc employs a Certified Information Systems Security Professional (CISSP) within our
Information Security Department. Information Security Policies are available upon request.
|
|
|
|
 |
|
