Security Framework

Covid-19 Response

“Big Firm Abilities, Small Firm Agility”

Security Framework

Our expert security and GRC team works hard to ensure we comply with industry standards and global regulations, such as SOC 2, GDPR, CCPA, and more.

Security

Security & Privacy

As leaders in power engineering, we prioritize the safety and privacy of our customers, partners, and team members. We understand that protecting our clients' assets, data, and infrastructure is as critical as our innovative solutions.

Our comprehensive security framework integrates advanced physical and cybersecurity measures, ensuring the highest protection standards across all our operations. We maintain rigorous security protocols that meet and exceed industry standards, including NIST 800, ISO 27001, and NERC CIP requirements in all our offices.

We provide our clients and partners with engineering excellence and top-notch security because your trust is our power, and we protect it at every level.

Our Security System

Network Security

Firewall
VPN
IDS/IPS
Encryption

Corporate Security

Physical Security
Cybersecurity
Information Security
Personnel Security

Access Control

Data Access
Logging
Password Security
Physical Security

Network Security

Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Virtual Private Networks (VPN)
Network Segmentation
Access Control Lists (ACLs)
Encryption
Security Information and Event Management (SIEM)
Anti-Malware Solutions
Network Monitoring
Patch Management

Corporate Security

Physical Security
Cybersecurity
Information Security
Personnel Security
Risk Management
Compliance

Access Control

Data Access
Logging
Password Security
Physical Security

Policies

Cybersecurity Policy
Physical Security Policy
Incident Response Policy
Access Control Policy

Business Continuity

Recovery Time Objective <24 Hours
Recovery Point Objective <24 Hours
Business Impact Analysis (BIA)
Risk Assessment

Password Security

Use of password managers
Avoiding password reuse
Password length requirements
Secure storage of passwords

Policies

Cybersecurity Policy
Physical Security Policy
Data Protection and Privacy Policy
Incident Response Policy
Access Control Policy
Business Continuity and Disaster Recovery Policy
Compliance and Regulatory Policy
Risk Management Policy
Employee Training and Awareness Policy
Vendor Management Policy
Information Classification and Handling Policy
Patch Management Policy
Change Management Policy
Asset Management Policy
Remote Access Policy

Business Continuity

Recovery Time Objective <24 Hours
Recovery Point Objective <24 Hours
Business Impact Analysis (BIA)
Risk Assessment
Recovery Strategies
Emergency Response Plan
Communication Plan
Roles and Responsibilities
Resource Requirements
Incident Management
Training and Awareness
Testing and Exercises
Plan Maintenance

Password Security

Use of longer passwords or passphrases
Avoiding character complexity requirements
Use of password managers
Allowing for easy password recovery
Avoiding password reuse
Regular password updates are not required
Password length requirements
Complexity requirements (e.g., mixed characters)
Password expiration policies
Secure storage of passwords
Prevention of password sharing
Regular review of password policies

Data Security

Access Reviews
Backups Enabled
Data Erasure
Encryption-at-Rest

Data Privacy

Cookies
Data Breach Notifications
Employee Privacy Training
Data Privacy

Endpoint Security

Patch management
Application whitelisting
Secure configuration
Data Loss Prevention

Data Security

Access Reviews
Backups Enabled
Data Erasure
Encryption-at-Rest
Data Classification
Regular Audits
Data Masking
Secure Data Transmission
User Authentication and Authorization
Data Loss Prevention (DLP)
Incident Response Planning
Compliance with Data Protection Regulations
Secure Data Storage Solutions
Endpoint Security
Data Integrity Checks

Data Privacy

Cookies
Data Breach Notifications
Employee Privacy Training

Endpoint Security

Antivirus and Anti-Malware Software
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Device Encryption
Endpoint Detection and Response (EDR)
Extended Detection and Response (XDR)
Patch Management
Application Whitelisting
Secure Configuration
Mobile Device Management (MDM)
User Authentication and Access Control
Data Loss Prevention (DLP)
Network Access Control (NAC)
Behavioral Analysis
Regular Security Updates and Monitoring