Governance 

Sunray Sustainability, LLC d/b/a Hello Sunray policies guiding the various teams at Hello Sunray. The information risk council is responsible for governing the information security and risk management duties of the organization which include the development and maintenance of internal controls, development, and ratification of policies, as well as conducting annual risk assessments, internal audits, business impact assessments, and overseeing risk treatment plans. 

Access Management

In order to limit access to sensitive information, Hello Sunray has established role-based access controls that account for job function, active employment, legitimate business need, and privacy best practices. Hello Sunray’s access control division reviews roles on a quarterly basis to ensure compliance.

Physical Security 

Hello Sunray prioritizes the security of endpoints by ensuring all company assets have system hardening configurations enabled, including antivirus software. Access to Hello Sunray’s systems is managed through Password Complexity Standards, 2-Factor Authentication, and Single Sign-On.

Performance Monitoring

Hello Sunray utilizes system monitoring tools, routine reviews, and comprehensive reporting to provide the basis for the effective operation of internal controls.

Hello Sunray has action plans in place which facilitate timely responses to security events, and address compliance as well as confidentiality concerns. These are laid out and made available to employees in the form of written policies and procedures. 

System Operations 

Hello Sunray ensures critical information is secured through the use of encryption technology and established backup policies and processes. Any deviation from the norm is promptly addressed by Hello Sunray’s engineering staff. 

Hello Sunray maintains detailed incident response and business continuity plans that delineate duties and action plans during a security incident. In the case of malicious acts, natural disasters, or continuity events, Hello Sunray maintains standards for identifying, documenting, reviewing, and remediating incidents faced by the organization. After an incident has been remediated, further analysis and management reviews take place in order to identify the root cause of the incident and prevent a similar occurrence in the future.

Privacy Questions and Concerns:

Phone: 833-394-2442

Email: [email protected]

Address: 75 East Market Street, Akron, OH 44308