A security policy is defined as a set of documents, in which the company policies and practices with regard to confidentiality, integrity and availability of information and information systems are laid out. These documents state in writing how a company plans to protect its physical and information technology (IT) assets.

The purpose of the information security policy is:  

• To establish a company-wide approach to information security
• To prescribe mechanisms that help identify and prevent the compromise of information security and the misuse of company data, applications, networks, and computer systems
• To define mechanisms that protect the reputation of the company and allow the company to satisfy its legal and ethical responsibilities with regard to connection of its networks and computer systems to worldwide networks
• To prescribe an effective mechanism for responding to external complaints and queries about real or perceived non-compliance with this policy. 

For each specific system, the company specialists choose different engineering tools to protect the client's information. At the same time, the used information levels don't complicate the authorized access and data management.  

To provide the confidentiality, integrity, and availability of information and information systems, Belprog applies the following methods:

• access control;
• intrusion detection;
• backup and archiving;
• centralized security management;
• server intrusion prevention;
• auditing and monitoring of security aids;
• internet access auditing;
• analysis of information systems security;
• spam buster;
• thorough authentication.

Belprog is determined to safeguard each outsourcing project from internal and external circumstances, which may cause harm to customers' interests, services, and secret information. Realizing the information security policy, it is necessary to take into account the human factor. Therefore, in addition to engineering security methods, Belprog undertakes a number of administrative measures, including:

• Maximum limitation of physical access to databases and systems
• Every employee or consultant of the company signs «Non-disclosure agreement» and confirms it annually
• Belprog works in accordance with international laws on Intellectual Property Rights Protection
• While hiring the personnel, the company screens a candidate for criminal background, education, and experience; and takes into account the references about a candidate from the previous employer.

The company guarantees that the source codes, trade secrets, patents, and any other information involved into the project is not exposed to disclosure to a third party.  This allows us to build a long-term partnership with our customers based upon mutual trust and ongoing understanding.