Access control to premises and facilities. Endava restricts access to all “open” office spaces, and to any dedicated “secure” areas, to authorised personnel using a centrally-managed access control system based on individually-assigned RFID (chip) access cards that operate electromagnetic locks on all doors to each office floor and to dedicated “secure” areas. Access is granted at a “group” or “role” level, all accesses are logged to the central access control system, and use and non-use of access cards is audited monthly. The facility incorporates: • CCTV cameras covering entrance/exit doors to all office spaces and to any “secure” areas; CCTV images are retained for one month; • 24/7 security post at building main entrance; • motion sensors and intruder alarm system; and • Security Alerting System with smoke and fire detectors.
Access control to premises and facilities. A security function exists to grant, adjust, and revoke physical access to facilities where Customer Data resides or can be accessed. The exterior of the Cheetah facility will be physically secure to prevent the public from unauthorized entry. No signs outside the facility show that Customer Data is processed or stored at the facility. Exterior doors will close automatically and be alarmed for unauthorized entry.
Access control to premises and facilities. Service Provider has implemented the following measures to avoid the access of unauthorised persons to the carriers of Personal Data and computer systems by which the Personal Data is processed or used: • Access to the involved data processing centres is regulated. • All persons need to identify themselves to gain access to a data processing centre. This requires an identity card issued by Service Provider. There are documented processes for the issuing of identity cards by Service Provider. The ownership and the return of this identity card is followed and examined. • Records of visitors are made. Visitors are provided with temporary identity cards and need to be accompanied by an employee of Service Provider to gain access to the data processing centre. • Only authorised employees of Service Provider have the right to get electronic access cards for the processing centre. • Standardised security measures exist and are carried out in the data processing centre following industry recognized best practices including electronic access control systems by card access, alarm systems, cameras and security staff. The equipment is inspected on a regular basis.
Access control to premises and facilities. 1.1 Unauthorized access (in the physical sense) must be prevented.
