14. Risk Management

At Thru, we implement a comprehensive risk management strategy to safeguard our Managed File Transfer services and our customers' data. Our approach encompasses:

14.1      Regular Risk Assessments

• Systematic identification and evaluation of potential threats

• Utilization of industry-standard frameworks (NIST, ISO 27001)

14.2      Mitigation Strategies

• Development and implementation of targeted risk mitigation measures

• Continuous monitoring and adjustment to address evolving threats

14.3      Third-Party Risk Management

• Thorough vetting and ongoing assessment of vendors and partners

14.4      Compliance and Regulatory Adherence

• Monitoring and ensuring compliance with relevant standards and regulations

14.5      Business Continuity and Incident Response

• Comprehensive plans for service continuity and effective incident handling

• Regular testing and refinement of these plans

14.6      Security Awareness

• Ongoing employee training to mitigate human-factor risks

Through this robust risk management program, we proactively address potential threats, ensuring a secure and reliable environment for our customers' file transfers. Our commitment to effective risk management is integral to our overall security strategy, providing confidence in the resilience of our services.