Trust
Inspiring confidence and trust
The protection of your data is at the forefront of everything we do. We strongly believe that a reliable and secure ecosystem is necessary and foundational to providing you with trusted, outstanding solutions.
Overview
Our Trust Services Program was established to ensure that Visier takes an integrated and holistic approach to protecting customer data.
As part of the program, our Information Security, Privacy, Legal, and Governance, Risk, and Compliance (GRC) teams work closely together to ensure we continue to:
meet applicable legal and regulatory obligations,
maintain and enhance a robust internal control environment, and
fulfill the commitments we made to our customers.
The program is further supported by corporate policies, processes, and practices that have been designed to meet industry standards, information security frameworks, and applicable privacy laws and best practices. Visier provides customers additional comfort over its practices by regularly obtaining validation and third-party attestations from independent audit and security organizations.
While we consider several aspects in designing and enhancing our Trust Services Program, its core components are based on people, governance, technology, continuous improvement, and assurance.
People
Our program is comprised of and managed by a team of subject matter experts in the areas of information security, privacy, risk management, governance, audit, and compliance. Diversity of expertise within the Trust Services team drives Visier's integrated and holistic approach in protecting the organization and our customers.
Governance
Effective governance is key in helping Visier achieve its organizational objectives and strategic goals. Our corporate policies, processes, and practices consider business risks and applicable legal and global regulatory requirements. They are also based on leading information security standards and frameworks such as ISO/IEC 27001 and 27002, ITIL, COBIT, and US NIST.
Technology
Apart from robust policies and processes, our program has implemented technical controls for the protection and resiliency of core infrastructure and applications that support Visier products and services. Several advanced applications are used to monitor Visier’s infrastructure (e.g. SIEM, log aggregation and monitoring tools, threat and vulnerability solutions), detect unusual activities, and alert respective teams for appropriate action.
Continuous Improvement
The program’s components are regularly reviewed by Visier management and are continually enhanced based on the changing information security and regulatory landscape, emerging risks, and key customer concerns.
Assurance
Our program provides both internal and external stakeholders (e.g. Visier’s Board of Directors, customers, prospects) confidence in Visier’s security, privacy, and governance practices. Assurance is obtained from a wide range of sources, including third-party audits and attestations, certifications, self-assessments (e.g. CSA CAIQ), risk management activities, training and awareness, threat and vulnerability assessments, board oversight and monitoring, and through fostering a strong security and privacy aware culture at Visier.
Trust Contacts
Have you seen a potential vulnerability or security issue? Please contact our security team at security@visier.com.
For privacy questions please contact privacy@visier.com.
To contact Visier’s Data Protection Officer (DPO), please email dpo@visier.com.