Security
Precision Opinion is monitored and recorded with 24hr video surveillance. Precision Opinion systems are protected by physical security and high availablity corporate firewalls. The intrusion detection system monitors network and system activities for malicious activities or policy violations. Should an event occur, the system will automatically attempt to stop detected possible incidents while reporting to security administrators. To ensure uptime and service level agreements mission critical systems are constantly monitored 24/7 with real-time alerts and notification.
Precision Opinion understands confidentiality of data in today's enviornment. Files that contain sensitive data need to be protected. Whether stored on a PC or sent via email -- to that end, Precision Opinion meets Federal government compliance and can deliver a secure manner of exchanging sensitive data with clients and partners including FISMA, OMB, and FIPS-140 using cryptographic modules.
The following Legislation was announced on June 23, 2009. Precision Opinion was at the time of announcement and remains in compliance.
NV - Governor Gibbons (R) has signed S.B. 227 into law. The new law prohibits any businesses in Nevada from (1) transmitting personal information outside of the secure system of the business or (2) moving any data storage device beyond the logical or physical boundaries of the business, unless secured by encryption. A data storage device is defined as “any device that stores information or data from any electronic or optical medium, including, but not limited to, computers, cellular telephones, magnetic tape, electronic computer drives and optical computer drives and the medium itself. Encryption is defined as “the protection of data in electronic or optical form, in storage or in transit, using: (1) An encryption technology that has been adopted by an established standards setting body, including, but not limited to, the Federal Information Processing Standards issued by the National Institute of Standards and Technology, which renders such data indecipherable in the absence of associated cryptographic keys necessary to enable decryption of such data; and (2) Appropriate management and safeguards of cryptographic keys to protect the integrity of the encryption using guidelines promulgated by an established standards setting body, including, but not limited to, the National Institute of Standards and Technology.” The law also requires any business in Nevada that accepts payment by a credit card for goods or services to comply with the Payment Card Industry Data Security Standard. The new law applies to all businesses in Nevada, including survey and opinion research companies located in Nevada. The new provisions go into effect January 1, 2010.