Dan Farrelly

Dan Farrelly serves as the CTO and Founder of a company that prioritizes stringent information security protocols. The company’s security program is structured around the SOC 2 framework and includes regular independent third-party assessments to evaluate its security and compliance controls. Annually, the company also undergoes independent third-party penetration testing to ensure the integrity of its systems. All employees undergo mandatory security awareness training that aligns with industry standards and are required to sign confidentiality agreements. The company conducts background checks on all new hires in compliance with local laws. Dan’s company utilizes both Amazon Web Services (AWS) and Google Cloud Platform (GCP) for hosting services, with encryption at rest for all databases and TLS/SSL encryption for data in transit. Regular vulnerability scanning and threat monitoring are integral parts of the security strategy. The company employs monitoring services to promptly alert the team of any system failures impacting users and has established a detailed process for handling information security events, which includes escalation procedures, rapid mitigation, and communication strategies. Access to cloud infrastructure and sensitive tools is restricted to authorized personnel only, following the principle of least privilege in identity and access management. Quarterly access reviews are conducted for team members with access to sensitive systems, and there are stringent password policies in place, supported by the use of a password manager. Additionally, the company conducts annual risk assessments to identify potential threats and evaluates vendor risks thoroughly before establishing new vendor relationships.