Rockfish Data adheres to a formal vulnerability management process and applies patches based on a documented SLA.

Both role based and user based access controls are available for the Rockfish product suite

MFA is enabled for all the users to increase the security levels. The primary objective of multi-factor authentication is to reduce the risk of account takeovers and provide additional security for users and their accounts. Since over 80% of cyber breaches happen due to weak or stolen passwords, MFA can provide added layers of security necessary to protect users and their data.

Rockfish engages in third-party penetration testing annually and upon the release of new products to proactively identify and address security vulnerabilities within our systems. The outcomes of these tests are meticulously documented, and any findings are prioritized for remediation according to their severity.

Rockfish is committed to maintaining robust asset management practices that span both virtual and physical assets. Our asset management policy is designed to systematically identify the organizational assets while defining appropriate protection responsibilities and is updated annually.

Rockfish is committed to maintaining a high level of security and privacy awareness among its personnel through comprehensive annual training programs. This training covers critical topics secure communication, data classification, phishing, physical security, social engineering, data privacy, third-party/application security, laptop standard, protect data, and acceptable use.

A visual representation of a computer or telecommunications network.

Our network activity is logged with specialized detection logic in place to identify potential security threats such as unauthorized access or anomalous behaviour. These systems are critical for the early detection of attacks, allowing us to identify attackers and other anomalous behaviour and generate alerts for further investigation.

To safeguard our infrastructure, Rockfish utilizes a combination of traditional firewalls. These tools allow us to monitor and control the flow of network traffic, preventing unauthorized access and ensuring data integrity and security

Rockfish Data Security Defence and Intelligence Team actively monitors the environment for known attacker tactics, techniques, and procedures (TTPs), as well as known malicious binaries and other suspicious activities. These regular activities are complemented by periodic reviews and investigations into anomalous activities to discover unknown threats occurring on a regular cadence.

All employee endpoints are protected with an advanced EDR solution. Endpoint security signals are monitored regularly for anomalous activity.

To protect the confidentiality and integrity of information stored on all employee endpoints, Rockfish Data mandates full-disk encryption. Additionally, we continuously monitor endpoint security signals to promptly identify and investigate any anomalous activity.