For Sales

Introduction#

Welcome to the Vidyard Security Awareness Training Module, for SALES!

In this module, we'll go over some sales specific security related services and processes.

The Driver Behind Security Reviews#

In the modern era, inter-business relationships require not only trust, but validated trust. Recent supply-chain attacks and third party vendor breaches have instilled a new paranoia in business operations teams. With compliance and regulatory policies like GDPR and CCPA in the picture, processing data for consumers comes with a long list of directives and potential punitive measures.

Fortunately, we have a process.

SOC 2 Type II#

First off, we have a SOC 2 Type II audit report that we obtain from a disinterested third party annually. In MOST cases, just having this audit report will be Good Enough for a customer's security team to give us a green checkmark in their spreadsheet. You can freely mention that we have a SOC 2 report, and hopefully it helps.

In some of the larger deals, or when the customer operates in a compliance-heavy industry such as finance, health, or government, we tend to have a few extra hoops to jump through. In those cases, SOC 2 is just a tick in a box in a long list of requirements.

Client Security Packages#

I've put together two security packages for use in conversations with clients. More details on the process involved can be found Here on our Wiki

The data within these packages may need to be updated often, and so we need these documents to be in a predictable location. DO NOT export, download, or copy these documents with the intent of sharing outside of Digify.

REDACTED Security Package#

Our redacted package can be shared with prospects, clients, and third parties. This should be considered as classified ORANGE, however it doesn't actually need an NDA. Instead, the Digify link can be shared which will obtain the receiving party's email address.

In this package there is a copy of our NDA, and if the customer wishes to receive the unredacted copies, they can exercise the NDA right from the package.

COMPLETE Security Package#

The complete package requires an NDA for viewing, and contains unredacted copies of every document in the redacted package. Some of the information in these documents are sensitive, however I have actually redacted any of the TOP SECRET stuff. Generally, this package is shared by the SC team at a particular point in the process. DO NOT SHARE THIS PACKAGE WITHOUT AN NDA.

When to Engage with Security#

I fully empathize that sometimes processes can feel long and arduous and it may feel like the easy path is to circumvent policies to get that deal moving, however our continued success as a business relies not only upon sales and growth, but stability and security.

Circumventing controls will destabilize and harm us as a business. If you're ever in need of a hastened process to help get a deal across the line, reach out and I will see what I can do to help!

Purple#

And the answer for this quiz is.....

Purple.