Security Policy
Last updated: January 1, 2025
ARIAS Information Technology LLC takes security seriously. This policy outlines our security practices and provides instructions for responsible disclosure of security vulnerabilities.
Our Security Commitment
As an IT services company, we understand the importance of security. We implement industry-standard security measures to protect our systems and client data, including:
- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication measures
- Continuous monitoring and logging
- Regular software updates and patch management
- Employee security training
Responsible Disclosure
We appreciate the security research community and welcome reports of potential security vulnerabilities. If you believe you have discovered a security vulnerability in our systems, please report it responsibly.
How to Report
Please send vulnerability reports to:
Email: info@ariasinformationtechnology.com
Subject line: Security Vulnerability Report
What to Include
Please provide as much information as possible, including:
- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact of the vulnerability
- Any proof-of-concept code (if applicable)
- Your contact information for follow-up
Our Response
When you report a vulnerability:
- We will acknowledge receipt within 2 business days
- We will investigate and validate the report
- We will work to address confirmed vulnerabilities promptly
- We will keep you informed of our progress
- We will credit researchers who follow responsible disclosure (if desired)
Guidelines
We ask that security researchers:
- Make good faith efforts to avoid privacy violations and service disruption
- Do not access or modify data belonging to others
- Do not perform denial-of-service attacks
- Allow reasonable time for us to address issues before public disclosure
- Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue
Client Data Security
For clients using our IT services, additional security measures and policies are detailed in your service agreement. We maintain strict confidentiality of client data and systems.
Questions
For general security questions or concerns, please contact us at info@ariasinformationtechnology.com
Questions?
If you have any questions about this policy, please contact us at info@ariasinformationtechnology.com