SECURITY PRACTICES, POLICIES AND PROCEDURES

How FSSI handles and safeguards your data.

Since our inception in 1980, data security has been a top priority at FSSI.  Today, we employ some of the latest and most advanced technologies and practices to maintain the safety and integrity of client information.


User/server level security
FSSI maintains User/Server level security whereby data files are secured by user permissions enforced by centralized domain policies. Service Level Security (Web, Email, Database, and other services) are audited and updated with the latest Service Packs.

Firewall with hot failover
Placed between the Internet and the FSSI network, this measure blocks malicious and/or unauthorized network attempts. Data transmissions are encrypted (public key provided), zipped (with Strong Password), and generally sent via SFTP.

Individual Client SFTP accounts are set up; data passing through the firewall is blocked if the originating IP is not consistent with the set up rules. Other transmission methods are also available (Dedicated T-1′s, private VPN, etc.) and can be implemented according to clients’ needs.

Validation and secure storage/archival
Once a data-file naming standard is validated and the data-validation preprocess is successful, files are automatically pulled into the FSSI network for processing. All client input data is stored in secure locations with access limited to authorized personnel.

Input files received and processed via client server networks are stored for no more than 60 days, unless specified otherwise. Following processing and printing, files are securely archived.

Deletion and shredding
Documents containing personalized customer data (printed or electronic) are deleted or shredded using FSSI’s commercial shredder after 30 days from use, or stored in a secure location if they are needed for longer.

Physical security precautions
FSSI has numerous, facility-wide physical-security measures in place, including: access-limiting key cards for every employee, door alarms, internal and external security cameras, a gated entryway and secure property perimeter.

Disaster Recovery (DR)
In accordance with both our operating policies and SAS 70 requirements, FSSI adheres to a formalized DR plan that is regularly reviewed and updated.

For help in assessing your current or future DR needs or tips for drafting your company’s DR plan, contact FSSI today.