Security and data protection are critical for an any ESG (Environmental, Social, and Governance) assessment, reporting, and benchmarking platform because such platforms handle sensitive, often proprietary information about organizations’ sustainability, governance practices, and performance metrics.
MyESG goes the extra mile and beyond in ensuring your data security and protection… and avoid the “Opps!” moment later. We have implemented the following among other measures:
1. Access Control and Authentication:
-
We use AWS IAM to enforce least privilege by granting only necessary permissions to users, applications, and services.
-
Multi-Factor Authentication (MFA) has been implemented for all users.
2. Data Encryption:
-
Encryption at Rest is performed when data is stored in database (DynamoDB)
3. Network Security:
-
AWS Web Application Firewall (WAF) is used to protect against common web vulnerabilities.
-
AWS Shield is used to protect the platform from Distributed Denial of Service (DDoS) attacks.
4. Monitoring and Logging:
-
AWS CloudTrail to log API calls and CloudWatch to monitor metrics, performance, and resource utilization.
By implementing these measures, we achieve robust data protection, enhanced security, and compliance with necessary regulatory standards. AWS’s tools and services are instrumental in helping us maintain a secure environment.
