Data Loss Prevention
- Restricted internet access with URL whitelisting and firewall controls
- Anti-virus deployed per client requirement across all systems
- Email restricted to approved domains only
What this covers
The same rules on every floor
Adamas has handled client data since 2017 — today for 20+ client brands, with 1600+ people and 1000+ seats across eight centers in six states and one union territory. All eight run the same ISO 9001:2015 quality system, so a control that applies in Gurugram applies in Pithoragarh.
ISO 9001:2015Quality system at all eight centers
AES-128Or equivalent, in transit and at rest
1 hourTo report a client-impacting incident
30/60/90Days to remediate high, medium, low findings
Information security
Your Data, Under Guard
Data protection, access control, governance and round-the-clock oversight — safeguarding client and organizational data at every layer.
User Access Control
- Role-based access matrix reviewed annually
- Unique, traceable user IDs for every employee
- Privileged access limited to authorized IT personnel on written request
Encryption & Destruction
- File and disk-level encryption (AES-128 or equivalent), in transit and at rest
- Secure shredding of hardcopy records no longer required
- Secure wipe of digital data and retired devices before disposal
Password & Device Security
- Minimum 8-character complex passwords with 90-day expiry
- Account lockout after 3 invalid login attempts
- Whole-disk encryption (BitLocker or equivalent) on portable devices
Training & Awareness
- Information security refresher every six months
- Covers password hygiene, desktop locking and customer-data confidentiality
- Unauthorized downloads and browsing restricted on office systems
Roles & Responsibility
- Dedicated IS Support Manager owns policy review, antivirus and patch updates
- Admin Officer audits printer, AIP and access controls periodically
- Inactive accounts reviewed every 90 days and disabled
Incident Management
- Client-impacting incidents reported within 1 hour of discovery
- All incidents logged with root-cause analysis
- Risk register tracked to closure with defined ownership at each stage
Vulnerability & Patch
- Vulnerability assessment and penetration testing half-yearly
- Firewall and IDS/IPS monitoring with periodic configuration review
- Remediation SLAs — high 30 days, medium 60, low 90
Your due diligence
Send us your security requirements
Tell us what data the process touches and we will show you which controls, owners and review intervals apply before anything goes live.