Instructure Security

Instructure assesses and treats risks, including methodologies, risk criteria, and the process for identifying, evaluating, and mitigating risks to acceptable levels.

Establishes controls to manage access to information and systems, ensuring that access is restricted to authorized users based on their roles and responsibilities.*

Manage daily operations securely, such as malware protection, backups, logging, monitoring, and secure configuration of systems.

Protects the security of communications, including network security management, secure transfer of information, and protection against unauthorized access.

Address security considerations for employee lifecycle management, including screening, onboarding, training, and termination of staff to minimize insider threats.

Requires security logs and monitoring activities to detect and respond to unauthorized actions or security breaches.

Integrating security into the software development lifecycle, including secure coding, vulnerability scanning, and secure deployment practices.

Protect against malware threats, including anti-malware software, regular updates, and user awareness training.

Acceptable and prohibited behaviors for using the organization’s information systems, ensuring users are aware of their responsibilities in maintaining security.

Instructure's Compliance, Privacy, and Security Awareness Training upon hire, as per our employment terms and conditions, and annually thereafter to ensure that all employees and contractors understand their role in protecting information.