Security Program

We are committed to security excellence. If you have any security concerns or questions about our security practices, please contact us at security@ekrewards.com.

Information Security Management

We maintain an Information Security Management System (ISMS) that follows industry best practices and international standards. Our security policies and procedures are regularly reviewed and updated to address emerging threats and changing business requirements.

Risk Management

Regular risk assessments are conducted to identify potential security vulnerabilities and threats. We implement appropriate controls and mitigation strategies to address identified risks and maintain an acceptable risk posture.

Security Controls

We implement layered security controls including preventive, detective, and corrective measures. Our controls cover technical, administrative, and physical security aspects to provide comprehensive protection.

Network Security

Our network infrastructure is protected by multiple layers of security including firewalls, intrusion detection/prevention systems, and network segmentation. We regularly monitor network traffic for suspicious activities and potential threats.

Application Security

We follow secure software development lifecycle practices, including code reviews, vulnerability assessments, and penetration testing. All applications undergo rigorous security testing before deployment to production environments.

Data Encryption

All sensitive data is encrypted both in transit and at rest. We use industry-standard encryption protocols including TLS 1.2+ for data transmission and AES-256 encryption for data storage.

Access Control

We implement the principle of least privilege for all system access. Multi-factor authentication is required for administrative access, and role-based access controls ensure users only have access to the resources necessary for their roles.

Monitoring and Logging

We maintain comprehensive logging and monitoring systems that track security events across our infrastructure. Security Information and Event Management (SIEM) systems analyze logs in real-time to detect potential security incidents.

Incident Response

Our incident response team follows established procedures to quickly identify, contain, and remediate security incidents. We maintain an incident response plan that is regularly tested and updated.

Business Continuity

We have business continuity and disaster recovery plans in place to ensure service availability during unexpected events. Regular backups and recovery procedures are tested to verify their effectiveness.

Regulatory Compliance

Our security program is designed to comply with relevant data protection regulations including GDPR, CCPA/CPRA, and Indian data protection laws. We regularly review our practices to ensure ongoing compliance with evolving regulatory requirements.

Industry Standards

We follow industry-recognized security standards and frameworks including ISO 27001, NIST Cybersecurity Framework, and OWASP guidelines. Our security controls are aligned with these standards to ensure comprehensive protection.

Third-Party Security

We conduct security assessments of third-party vendors and service providers to ensure they meet our security standards. Contracts with third parties include security requirements and data protection obligations.

Employee Training

All employees undergo regular security awareness training covering topics such as phishing awareness, password security, data handling, and incident reporting. Security is integrated into our company culture.

Security Policies

We maintain comprehensive security policies that are regularly communicated to all employees. These policies cover acceptable use, data classification, access control, and other critical security areas.

Continuous Improvement

Our security program is continuously evaluated and improved based on emerging threats, technological changes, and lessons learned from security incidents. We conduct regular security reviews and assessments.

Vulnerability Management

We maintain a comprehensive vulnerability management program that includes regular scanning, assessment, and remediation of security vulnerabilities. Critical vulnerabilities are prioritized for immediate remediation.

Penetration Testing

Regular penetration testing is conducted by internal security teams and independent third-party assessors. Testing covers applications, networks, and infrastructure to identify potential security weaknesses.

Security Audits

We conduct regular internal and external security audits to assess the effectiveness of our security controls. Audit findings are used to drive continuous improvement of our security program.

Security Team Contact:
Email: security@ekrewards.com
Response Time: Within 24 hours for initial response
For urgent security matters, please include "URGENT" in the subject line