Data Protection and Privacy
Policy Protecting Data is a priority at S3, we place great importance on security of data by adhering to strict security and data protection standards. S3 has implemented technical and organizational security measures to guarantee the security of confidential and personal data. Information is stored on secure networks and access is restricted to those employees and partners who are entitled to access our systems. Data confidentiality is about protecting data against unintentional, unlawful, or unauthorized access, disclosure, or theft.
Cybersecurity Maturity Model Certification (CMMC) requirements ensure that S3 has implemented adequate cybersecurity measures to protect sensitive data. CMMC requires organizations to incorporate data protection and access controls to ensure personal or sensitive data is protected and kept confidential.
Data Protection, Privacy and Monitoring
Personal data: Information relating to an identified or identifiable individual, such as name, identification number, location data, online identifiers etc. Confidential data is information that is meant to be kept secret and not intended for public dissemination. This sensitive information and protected to prevent unauthorized access, disclosure, or theft.
Data protection monitoring and collection involves processes and tools to oversee how an organization collects, stores, and uses data. The goal is to ensure that data is relevant, accurate, and complete, and that the organization is compliant with regulations.
S3 believes that protecting the security and privacy of data is important. Our Privacy Notice explains how we collect, store, use, disclose and transfer (hereinafter “process”) data. The personal data that we collect about you depends on the context of your interactions with us, the products. services and features that you use, your location, and applicable law.
While S3’s data privacy policies may contain specific requirements related to specific types of information [e.g., Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) ], S3 Personnel shall use best practices when handling Personal Data, unless an exception exists by compliance, laws or regulations. It is the responsibility of all employees of S3 to act on behalf of the company to protect confidential data from unauthorized access and/or misuse.
In accessing or granting access to electronic information and information technology resources, company personnel will comply with all applicable S3 policies and laws.
Device and Connection Information: We collect information about your computer, phone, tablet, or other devices you use to access public or corporate Information Systems and network resources. This device information includes your connection type and settings when you access, or use our services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages and device identifiers. We use your IP address and/or country preference in order to approximate your location for information security purposes.
How much of this information we collect depends on the type and settings of the device you use to access the Services. BYOD devices collect minimal information as stating the BYOD policy.
In addition to the purposes and uses described above, we use personal data in the following ways: