At yasoon, we take security very seriously. Our management team, composed of our CTO, our CEO, and our COO, has a wealth of experience and expertise in all aspects of security, from the technical to the organizational and human resources. They lead the security strategy and implementation across the company, ensuring that we follow the best practices and standards in the industry.
...
Furthermore, we maintain open communication channels between employees and the security team through Teams chat and channel announcements. This accessibility ensures that the security team is readily available to all yasoon staff.
Access management
Principle We follow the principle of least privilege, access logging (request access through ticketing)
...
which means we only give staff the data access they need for their role. Staff use individual accounts (not shared ones) and multifactor authentification to access data. If staff need more access, they must submit a ticket with a valid reason. Only our core management team can approve or deny these requests. We also check and remove any unnecessary accesses regularly.