Tiếng Việt
EnglishObjectives and scope
Protect confidentiality, integrity and availability of systems, data and evidence within the published scope.
POLICY
PUBLICATION
Trusted Delivery Security Policy
This online publication describes information-security controls, risk management and protection of the service infrastructure.
This publication provides website transparency and
does not replace a formally approved policy or practice statement.
Risk management
Identify, assess, treat and monitor risk on a recurring basis, prioritizing controls by impact and likelihood.
Access and identity controls
Role-based access, least privilege, strong authentication and periodic access reviews.
Cryptography and key management
Sensitive keys are lifecycle-managed with separation of duties and HSM use where required.
Monitoring and incident response
Logging, alerting, incident classification, investigation, remediation and notification follow defined procedures.
Business continuity
Contingency, backup, recovery and periodic testing support approved service-continuity objectives.
CLAIM CONTROL
Approved wording and interpretation limits
Mobile-ID applies risk-based information-security controls, access management, cryptographic protection, monitoring and continual improvement within the published management-system scope.
Absolutely secure; impossible to attack; 100% safe; data can never be lost.