How is access to our systems handled?

We work with personal accounts limited to what the task requires, and with two-factor sign-in wherever the system supports it. Shared accounts and passed-around passwords are avoided.

Access is documented, and once the project ends you deactivate it or we hand it back. For remote support during ongoing operations we agree defined routes instead of permanently open connections.