Our Commitment to Security
Hygia is committed to protecting the confidentiality, integrity, and availability of the information and systems used to provide our services. We maintain an information security program designed to identify and manage security risks and protect company and customer information.
Our security practices are supported by documented policies, defined responsibilities, risk management processes, technical safeguards, monitoring activities, and periodic reviews.
Security Governance and Risk Management
Hygia assigns information security responsibilities across relevant business and technology functions. Security risks are identified and assessed, with risk treatment decisions documented and assigned to designated owners.
Access Control
Hygia implements access controls designed to restrict access to authorized users based on business requirements. These include authentication mechanisms, role-based access restrictions, and multi-factor authentication (MFA) for administrative access to cloud environments and corporate systems.
Data Protection
Hygia classifies information based on its sensitivity and business requirements and applies appropriate safeguards based on the classification.
Sensitive information is subject to access restrictions and appropriate security controls. Encryption and other protection mechanisms are applied in accordance with Hygia’s security requirements and applicable business and regulatory requirements.
Cloud and Infrastructure Security
Hygia maintains security controls for its cloud-hosted environments. Relevant technology teams are responsible for the implementation, operation, maintenance, and monitoring of cloud security controls.
Security controls are designed to protect production environments and reduce the risk of unauthorized access, security incidents, and disruption of services.
Secure Development and Change Management
Hygia incorporates security considerations into software development and technology operations. Changes to systems and applications are deployed through defined change-management processes to support system security and reliability.
Security risks identified through development, infrastructure, and operational processes are addressed through established risk-management practices.
Security Monitoring and Incident Response
Hygia maintains processes for identifying, reporting, evaluating, and responding to suspected information security events and incidents.
Employees and contractors are required to report known or suspected security events, policy violations, and identified security weaknesses. Hygia also maintains channels for customers and users to report security concerns for review and resolution.
Business Continuity and Resilience
Hygia maintains backup and recovery capabilities to support the availability and recovery of critical systems and data in the event of a disruption.
Security Compliance and Assurance
Hygia’s information security program is designed to support applicable security, privacy, contractual, and regulatory requirements.
The effectiveness of security controls and compliance with information security requirements are evaluated through ongoing monitoring and applicable internal and external assessments.
Security Contact
Security concerns or suspected security incidents relating to Hygia systems or services may be reported to: