Privacy Disclosure Statement

To conduct business, Halock Security Labs may collect or accumulate non-public information from you and your organization by way of:
  • Terms & Conditions Agreements
  • Application for employment
  • Contractor Agreements
  • Authorization for background checks
  • Contracts
  • Statements-of-Work
  • Deliverables from engagements and reports
  • 1099
  • W2
  • other sources
Your information is not disclosed except as required or permitted by law and to conduct delivery of services and obligations under agreements made with organizations and individuals. Halock Security Labs uses the ISO 27001/27002 standard for guidance in securing non-public information. Information submitted through our Web site is encrypted verified by the little lock at the bottom of your browser. Halock Security Labs also maintains its own Code that includes special provisions for securing information:
  1. All In
  2. Show Up. Be There. Do the Work.
  3. Weigh Matters Carefully
  4. Secret Means Secret
  5. Bring in the Ship
  6. Renew Your Brilliance
  7. Practice Purpose Driven Security
  8. Stress Balance. Balance Stress.
  9. Know How to Ask
  10. Your Work. Your Name. Our Reputation.
Halock Security Labs will not sell your information to third parties. Sensitive information from deliverables resulting of an engagement or pre-engagement is kept encrypted during the course of work efforts and access is provided on a need-to-know basis to Halock team members. After the engagement, deliverables are archived and locked in a physical safe with more limited access to only practice leaders of Halock.
Halock keeps an email marketing list. You may opt-out of the list by sending a message to optout@halock.com. For additional information, contact us at 847.221.0200.
 

On-Demand Vulnerability Scanning:

Allows for unlimited scanning of Internet IP addresses to enable ongoing compliance with PCI quarterly vulnerability scanning requirement. Online filing allows for automatic notification to acquiring bank once compliance is achieved.

PCI Compliance Management Portal:

An online portal designed to facilitate PCI compliance efforts and to assist in managing all work efforts related to acheiving PCI compliance. Portal includes PCI related news articles with expert analysis, a comprehensive PCI knowledgebase, downloadable tools and templates, and more.