Onboarding

Before being granted access to customer data, CloudCard employees undergo a background check and sign a non-disclosure agreement. Access requests are submitted for the systems for which the employee has a business need, and at the lowest level of privilege the employee needs to accomplish their duties. System owners approve the access requests and grant the access. An employee is typically issued a laptop, and the device volumes are encrypted. Employees also receive Security Awareness training.

Offboarding

The employee’s laptop is returned to CloudCard and erased prior to disposal or reuse. The employee’s access is reviewed, and system owners are instructed to revoke access, which must be done immediately.