Company
Security and Quality
Pillarsis applies security and quality practices based on engagement requirements, data sensitivity, deployment model, and agreed architecture.
Secure delivery practices
Security and quality are treated as implementation concerns, not only final review activities. Practices may include secure requirements, architecture review, access controls, encryption, testing, logging, backup planning, recovery procedures, and controlled releases.
Specific controls depend on engagement requirements and agreed architecture. Any formal certification status should be verified during procurement.
- Secure development lifecycle
- Architecture and design reviews
- Role-based access controls
- Encryption in transit and at rest where required
- Code review
- Automated and manual testing
- Vulnerability management
- Audit logging
- Backup and recovery planning
- Release management
- Environment separation
- Privacy by design
- Security requirements
- Threat-aware design
- Dependency controls
- Incident handling
- Release governance
- Documentation
- Business continuity