Security and continuity

Data security and business continuity plan

Five parallel internet connections, an isolated network per client, 24/7 monitoring and teams trained in data protection: your operations keep running, your data stays protected.

Glass facade of the SODIAMA building, in Ankorondrano
5 connectionsto the internet, in parallel
24/7monitoring and security guards
1 networkisolated for each client

Defense in depth

Five layers of protection

Choose a layer to see the measures in place.

Layer 1 of 5

Physical security

Access to the building and production floors is controlled at every entrance, day and night.

  • 24/7 security guards provided by two companies
  • Dual video surveillance
  • Facial recognition access control

Network and power

If one connection goes down, work continues

One fiber line, two microwave links and two satellite links work together. The firewall balances the load and fails over automatically in the event of an outage.

On the power side, the SODIAMA building has a central backup generator, and our premises have UPS units that handle the transition.

Business continuity plan

Every incident has a planned response

Definition

A business continuity plan (BCP) describes how an organization maintains its essential services in the face of an incident: outage, failure, absence or spike in activity.

Incident
CSS response
Internet connection outageFiber, microwave or satellite
Traffic automatically fails over to the other four connections, without interrupting calls.
Power outagePublic grid
The UPS units take over immediately, followed by the building's central backup generator.
Spike in activitySeason, campaign, incident on your side
Volume forecasting, adjusted schedules and reinforcements organized by the operations team.
Intrusion attemptNetwork or workstation
Detection and blocking by the firewall, a monitoring alert, and an incident contained within the affected client's network.

Call center and GDPR

Your data protection obligations, shared

Data transfers outside the EU

Madagascar is not covered by an adequacy decision of the European Commission. Personal data transfers must therefore be governed by appropriate safeguards, such as standard contractual clauses.

Article 46 GDPR; Implementing Decision (EU) 2021/914.

Standard contractual clauses

Together with you, we define the contractual framework for each engagement: scope of the data processed, security measures, retention and deletion.

Templates published by the European Commission.

Committed teams

Reference and document checks at hiring, signed confidentiality clause and charter, data protection training before starting the job.

CSS recruitment procedure.

Frequently asked questions

Security and continuity

All questions

It is the set of measures that allow an organization to maintain its essential services in the face of an incident: technical failure, outage, absence of a team or an unusual surge in requests.

Does your security officer have questions?

We will send them our technical file and answer their security questionnaire.

The SODIAMA building in Ankorondrano