Securitrust Limited

Data Controller

The data controller within securitrust is responsible for determining the purpose and means of processing personal data. In other words, they decide what personal data to collect, how it will be used, and the policies governing its protection. This role is crucial for complying with data protection laws, such as the UK GDPR, ensuring the company handles personal data responsibly and transparently.

Mr François Nkodo is securitrust's data controller

Collected Personal Data

Securitrust may collect certain types of personal data to secure clients’ systems, comply with regulations, and respond effectively to threats. The specific data collected depends on the type of cybersecurity service provided, but common types include:

 1. **User Identification Data**
  - **Name**: Collected for account setup, identification, and service delivery.
  - **Username and Passwords**: Secured and often encrypted, this data is essential for authentication and access control.
  - **Contact Information**: Includes email addresses, phone numbers, and sometimes physical addresses for account recovery, alerts, and communication.

 2. **Device and Network Information**
  - **IP Addresses**: Used for identifying devices accessing networks, tracking potential malicious activity, and enforcing location-based security.
  - **Device IDs and MAC Addresses**: Collected to identify and secure devices connected to the network, helping manage and track authorized endpoints.
  - **System Logs**: Information on user activity within a network, including login times, accessed files, and session duration, to detect anomalies and unauthorized access.

 3. **Behavioral and Usage Data**
  - **User Behavior Patterns**: Includes keystroke patterns, access frequency, and typical login times, which help detect suspicious activity through behavioral analysis.
  - **Application Usage**: Monitors which applications users access and their duration of use, helping to ensure only approved software is being used and detecting possible exfiltration attempts.

 4. **Communications Content and Metadata**
  - **Email and Message Metadata**: Includes sender/receiver details, timestamps, and subject lines. This data is analyzed for potential phishing attempts and communication patterns.
  - **Activity on Collaboration Tools**: Data on actions within collaboration tools like Slack or Microsoft Teams, often collected to enforce security policies and detect internal threats.

 5. **Location Data**
  - **Geolocation**: Collected through IP addresses or GPS (if allowed) to detect unauthorized access from unexpected locations, especially for remote access monitoring.

 6. **Incident-Specific Data**
  - **User Activities During Security Incidents**: In response to a breach or security event, more detailed data on user actions (such as file downloads, commands entered, or interactions) may be collected for forensic analysis.

Securitrust handle this personal data with high levels of protection to comply with regulations like GDPR. The data collected is typically minimized, encrypted, and used strictly for security purposes, ensuring both client security and privacy compliance.

Purpose of collecting data

Collecting data is essential for protecting clients, identifying threats, and improving services. Here are the primary reasons a cybersecurity company collects data:

1. Threat Detection and Analysis

Data collection is critical for detecting threats and monitoring anomalies. By collecting logs, traffic patterns, and device activity, a cybersecurity company can identify unusual behavior that may signal a cyber threat, such as malware, unauthorized access, or phishing attempts.

2. Incident Response and Forensics

When a security incident occurs, data is essential for investigating and understanding what happened. This includes identifying the source of the breach, the methods used, and the extent of the damage. Collected data is crucial for performing forensic analysis to develop an effective response and recovery plan.

3. Risk Assessment and Vulnerability Management

Data from network configurations, system vulnerabilities, and previous security assessments helps in evaluating a company's risk profile. Understanding current vulnerabilities and past incidents allows a cybersecurity company to prioritize and mitigate risks before they lead to security incidents.

4. Compliance and Regulatory Requirements

Many industries have regulatory requirements for data security, such as GDPR, HIPAA, or PCI-DSS. Collecting data enables cybersecurity companies to monitor compliance, generate audit trails, and produce reports that demonstrate adherence to security standards.

5. Improving Security Services and Technologies

By collecting and analyzing data on security incidents and client systems, cybersecurity companies can enhance their security solutions, identify trends in cyber threats, and develop better detection algorithms. This continuous learning cycle helps cybersecurity providers adapt to evolving threats and deliver more effective protections.

6. Behavioral Analytics and User Awareness

Data on user behavior, like login times and locations, helps cybersecurity companies recognize patterns that indicate account compromise or risky user activity. Behavioral analytics can be used to create more targeted user training and awareness programs, reinforcing security best practices.

In short, data collection is vital for providing effective protection, enhancing service offerings, and ensuring compliance with regulatory standards.