Technical Controls

Our IT team has implemented the following technical controls to mitigate cyber security risks and protect FBSPL's data/information:

• Biometric turn-style door access. (Only authorized persons can go inside the premises).
• Implementation of UTM Firewall
• Endpoint security software
• Network level security
• Hardening of computer systems
• Azure hybrid network and mobile device management
• Network monitoring tools
• CCTV implementation and monitoring

Operational Control

Data breaches can come from multiple internal and external sources, including employees who fail to follow security procedures. We have hired a professional security guard to operate the ID system at the main gate to reduce these. These security guards take care of our physical security and ensure that only authorized people can enter the premises.

In addition, our process excellence team helps us run a Cyber Security awareness program for our employees.

Managerial Control

Our cyber security has been designed and implemented by our management in coordination with the IT team, operation team, and all other departments.

We have created SOPs for all departments to run the business smoothly and safely. Moreover, we use the NIST framework for internal risk assessments for our cyber security implementation and policies. We also hold ISO 27001 certification and follow all regulatory protocols.

Disaster Management

We are prepared to fight any disaster that could disrupt the functioning of our businesses. As an IT company, we have devised a plan for disaster management of our computer systems, servers, and data or information.

We do schedule preventive maintenance measures for all equipment and devices to ensure system safety from any failure.

This disaster management is based on the risk assessment which we have done for our company.

• To prevent any power failure, we have installed 120 KVA Modular UPS.
• We have installed a 250 KVA DG set to provide power backup if the government electricity board's electrical supply fails.
• We have multiple internet lines coming from different ISPs
• We have the support of our capable and reliable vendors, who are always ready to provide support 24/7. We have signed non-disclosure agreements with them.
• We have a warm site at a different location where we can start our operation within 24 hours in case of any calamity.

At FBSPL, cybersecurity is a practice that safeguards data integrity, ensures operational continuity, and upholds our clients' trust.