Onboarding
The following are required for employees upon starting employment at CloudCard and before being granted access to customer data:
A multi-state criminal background check
Sign a non-disclosure agreement
Review all relevant policies
Once the above activities are completed, the employee can be granted access to systems according to the following process:
Access requests are submitted for the systems for which the employee has a business need, and at the lowest level of privilege the employee needs to accomplish their duties.
System owners approve the access requests and grant the access.
An employee is typically issued a laptop, and the device volumes are encrypted.
Employees also receive annually refreshed Security Awareness training.
Offboarding
The employee’s laptop is returned to CloudCard and erased prior to disposal or reuse. The employee’s access is reviewed, and system owners are instructed to revoke access, which must be done immediately.