Physical access to Beginess’s headquarters location is managed by a proximity card and photo-ID system and perimeter doors are locked at all times.  Deliveries are received in a section of the building isolated from technology and trip support operations.  Visitors are required to sign in, are identified by a prominent visitor badge, and are required to be accompanied at all times by a Beginess employee while in our facility.   Employee and contractor access restrictions are based on job function and authorized by the supervisor, security manager, or facility manager.  Access is promptly revoked whenever an employee or contractor separates from Beginess employ, regardless of cause.

In order to serve our global customer needs, our headquarters operates around the clock and observes these security practices at all times.

Our CyrusOne data center is SSAE 18 Type II and ISO/IEC 27001:2013 certified as well as PCI-DSS compliant. It undergoes annual, independent, third-party audits to ensure it continues to meet strict compliance requirements for processes, controls, and safeguards. The data center is secured by onsite guards 24 hours a day, 365 days a year, video surveillance, key card security for strict access control, and man-trap type security doors to prevent tailgating. The data center is equipped with fire monitoring and suppression systems. Further, CyrusOne segregates customer infrastructure to restrict access in the event multiple customers are on-site at the same time.

Beginess contracts space in both Atlanta, Dallas Texas and Lax, CyrusOne facilities to safeguard data and operations against environmental threats.  Throughout recent events, including hurricane Harvey, COVID, and the Texas 2021 freeze, both data centers offered uninterrupted operation.

Access to customer information follows the principle of least privilege and is determined by employee job duties. All user access requires management authorization and assigned privileges are periodically reviewed by the IT Security Office. Additionally, we utilize contemporary technologies to alert the IT Security Office of file access activities that deviate from normal work behavior.  Upon employee separation, access to the physical campus and all systems is disabled immediately after notification by Human Resources.

Administrative access is more tightly controlled, abides by the principle of least privilege, and restricted by job function.

Beginess combines extensive network perimeter intrusion prevention against malware along with system-level safeguards, including data-at-rest encryption, regular software updates, periodic off-site backups, and advanced endpoint security tools.  Additionally, these security technologies are monitored 24×7.  The company network is subdivided into zones based on differing trust levels, to improve our ability to detect suspicious events and to limit the potential exposure of sensitive information. Further, the network perimeter prevents access to certain types of Internet sites and content that Beginess’s leadership team have determined are not essential for the business or create undue risk.

Remote access to the company’s information resources requires encryption-in-transit and multifactor authentication of individual employees.  Beginess-owned and managed workstations are provided for remote work, both to limit the flow of company data and ensure a high standard of system management.

Company email is filtered against contemporary threats such as spam, malicious software, phishing, impersonation of key personnel, and other fraudulent messages. Further tools are used to detect and warning when outgoing messages contain certain types of data.

Sensitive data storage is monitored for anomalous user access patterns, early warning signs of ransomware activity, and alterations to assigned access permissions.

All web applications are scanned for common vulnerabilities as part of our overall vulnerability management program and utilize contemporary HTTPS encryption methods to protect data.

Annually, our digital mission management platform, uvGO, and the company network undergoes a 3rd party penetration test.  Observed issues are promptly remediated under the umbrella of our vulnerability management program.

A comprehensive incident response plan governs detection, containment, investigation, reporting, and ongoing improvements to our security posture.

Our Business Continuity Program provides structured plans for the recovery of critical business functions and the resumption of those functions in the event of disaster. We review our business continuity plans periodically and conduct disaster recovery exercises, including scenarios based on weather, loss of access to our facilities, pandemic, or various cybersecurity incidents to ensure that these plans are ready, should a need arise.

At Beginess, we are committed to conducting our business across the globe ethically and in compliance with applicable domestic and international laws and regulations. We continue to set high standards within our organization and for the industry in which we serve. By partnering with us, you can be confident we are taking the necessary steps to help you conduct your missions in a compliant manner.

The foundation of our compliance program is set forth in our Code of Business Conduct and Ethics (the “Code”).

Every year, our people certify that they have read and will follow the Code. We believe that our commitment to these values is critical for our business and equips us to successfully partner with our clients.

Around the world there is a sharp increase in the number of anti-bribery enforcement cases, fines, and penalties levied against corporations and individuals. As a result, many organizations have adopted a compliance program with internal controls and demand that they only work with service providers who have similar controls in place.

As part of our Ethics and Compliance program, our people receive regular training on regulations, policies, procedures, and laws applicable to our global business. This includes anti-bribery laws such as the Foreign Corrupt Practices Act (FCPA) enacted in the U.S. and the U.K. Bribery Act.

We continually monitor, report, and track the effectiveness of our internal controls and compliance initiatives.

Our Corporate Compliance and Audit team works with your dedicated trip support team to make sure it has the latest information impacting your missions, including:

requirements for operating to U.S. sanctioned countries.

Anti-Slavery and Human Trafficking Statement

Supplier Code of Conduct