Summary
This document is a technical report detailing the Cherre Security Organization and Program. It outlines the comprehensive security framework adopted by Cherre, which is based on ISO 27001 and NIST 800-53 Information Security Standards. The report describes various security measures including people security, product security, application security, and change management processes. It details the procedures in place for employee onboarding, background checks, and continuous security education. The document also explains data encryption practices, penetration testing, and application monitoring. Additionally, it covers cloud and infrastructure security, asset management, vulnerability management, and incident response protocols. The report emphasizes the importance of physical security, business continuity, and vendor assessments, while also noting compliance with legal and regulatory requirements. Cherre’s commitment to maintaining a secure environment is evident through its structured approach to security management and continuous improvement initiatives.
