We will conduct a comprehensive cybersecurity and data protection audit of your SaaS solution, encompassing not only the main administrative interface but also all direct integrations. The aim is to identify and rectify any vulnerabilities, non-compliances, and other weaknesses that may compromise the security of the SaaS solution and its integrations. 

Once the necessary corrections in the items classified as Critical, High, and Medium have been successfully completed, we will issue the Seal. SaaS Defence N1, which will be valid for 6 months.

Expiration date: 6 months
Requirements: N/A

Alongside the annual cybersecurity and data protection audit, we will establish continuous monitoring of your SaaS solution to identify changes that may impact its security, non-compliances, and other weaknesses that could pose threats to the SaaS solution. We will also provide incident response as needed, ensuring both a proactive and reactive approach to safeguarding your SaaS solution.

If the SaaS solution already holds the Seal SaaS  Defence N1 valid, the implementation of the continuous monitoring process will enable the issuance of the Seal. SaaS Defence N2. This seal will be valid for 1 year and will be revalidated throughout the monitoring period; however, it will be subject to the condition of immediate or short-term treatment of any items identified as Critical, High, or Medium during the monitoring process. This ensures that the security of the SaaS is maintained, and any significant risks are promptly addressed at both technology and process levels.

Expiration date: 1 year and/or the monitoring process duration
Requirements: SaaS Defence N1

As an integral part of our service package (audit and monitoring), we provide periodic training in cybersecurity, secure development practices, focusing on the technologies used in the SaaS solution, and the vulnerabilities, non-compliances, and weaknesses identified. This training is aimed at your employees involved in the development and operation of the SaaS, with the goal of raising awareness about best practices in digital security. This initiative aims to strengthen the company's defensive posture and ensure the proper protection of your SaaS solution.

The SaaS solution that already holds the Seals SaaS Defence N1 and N2 may seek to obtain the Seal N3, provided it successfully implements the awareness training process on secure practices. This seal will be valid for 6 months and signifies a continuous commitment to improving digital security at the levels of technology, processes, and people.

Expiration date: 6 months
Requirements: SaaS Defence N1 e N2