Unique Account Authentication

Digital 2Moro promotes the use of unique accounts for administrative, operational, development, and support activities. Shared accounts reduce accountability and increase risk, making it difficult to identify who performed a particular action within a system.

Whenever supported by the underlying platform, hosting provider, software application, or service, individual user accounts are preferred over generic shared credentials. This approach improves traceability, accountability, and operational security.

• Individual user accounts for administrators and authorized personnel.
• Reduction of shared credential usage wherever practical.
• Improved accountability through user-specific access records.
• Controlled onboarding and offboarding of users.
• Clear ownership of administrative and operational activities.

Multi-Factor Authentication

Passwords alone are no longer sufficient protection for many modern systems. Digital 2Moro encourages the use of multi-factor authentication (MFA) wherever supported by the platform, hosting provider, cloud service, email platform, repository, or administrative environment.

MFA adds an additional verification layer that helps reduce the risk of unauthorized access resulting from credential theft, phishing attacks, password reuse, or compromised devices.

• Multi-factor authentication for administrative accounts where available.
• Additional protection for hosting, cloud, and email environments.
• Reduced risk from compromised passwords.
• Support for authenticator applications and platform-supported MFA methods.
• Encouragement of MFA adoption for client-managed environments.

Least Privilege Access

Digital 2Moro follows the principle of least privilege, meaning users are granted only the access necessary to perform their assigned responsibilities. Limiting unnecessary permissions helps reduce the potential impact of accidental changes, misuse, or unauthorized activity.

Administrative privileges are restricted to individuals who require elevated access to perform specific operational, support, development, or management functions.

• Role-based access management where supported.
• Limited administrative privileges.
• Periodic review of privileged access.
• Removal of unnecessary permissions when roles change.
• Separation of responsibilities where practical.

Additional information can be found on our Organizational Security page.

Secure Hosting Providers

Infrastructure security begins with selecting reliable hosting and cloud service providers. Digital 2Moro works with established providers that offer strong operational capabilities, security controls, infrastructure reliability, and global availability.

Hosting environments are selected based on project requirements, scalability needs, performance expectations, security capabilities, support quality, and operational maturity.

• Use of reputable hosting and cloud platforms.
• Infrastructure providers with established security practices.
• Support for SSL/TLS encryption and modern web security requirements.
• Reliable backup, monitoring, and recovery capabilities.
• Scalable infrastructure aligned with project growth.

Learn more about third-party service providers on our Vendor & Technology Partners page.

HTTPS/TLS Encryption

Digital 2Moro treats HTTPS as a baseline requirement for public-facing websites and web applications. Secure communication protocols help protect information transmitted between users, browsers, devices, servers, and supporting services.

Encryption helps maintain confidentiality, integrity, and trust by reducing exposure to interception, manipulation, or unauthorized access during transmission.

• HTTPS-enabled websites and applications.
• SSL/TLS certificates for secure communications.
• Protection of login credentials and form submissions.
• Secure transmission of API communications where applicable.
• Support for modern encryption standards through trusted providers.

Backup & Recovery

Backups are an important component of operational resilience. Digital 2Moro implements backup practices appropriate to the project, hosting environment, maintenance agreement, and business requirements.

Backup and recovery strategies help support continuity in the event of accidental deletion, system failure, software issues, configuration errors, security incidents, or other unexpected disruptions.

• Regular backup schedules where applicable.
• Support for restoration and recovery procedures.
• Protection against accidental data loss.
• Consideration of recovery objectives during planning.
• Backup verification where supported by the platform.

Additional details are available on our Business Continuity & Disaster Recovery page.

Infrastructure Monitoring

Monitoring provides visibility into the health, performance, and operational status of infrastructure components. Digital 2Moro uses monitoring capabilities available within hosting environments, cloud platforms, management tools, and supporting services to identify issues before they become larger operational problems.

• Monitoring of server and application health where available.
• Review of operational alerts and warnings.
• Identification of abnormal behavior or performance degradation.
• Support for troubleshooting and incident investigation.
• Improved operational awareness across managed environments.

Availability Monitoring

Availability is a key component of trust. Clients and users depend on websites, applications, portals, and digital services being accessible when needed. Digital 2Moro may implement availability monitoring solutions to help identify outages, interruptions, or service degradation.

Availability monitoring supports timely investigation and helps reduce downtime where operationally possible.

• Website uptime monitoring.
• Service availability checks.
• Alerting for unexpected outages where supported.
• Monitoring of critical operational services.
• Support for incident escalation and investigation.

Incident Response

Despite preventative controls, incidents may occur. Digital 2Moro maintains response procedures designed to help identify, assess, contain, investigate, remediate, and recover from infrastructure security events and operational disruptions.

The objective of incident response is to reduce impact, restore services safely, improve visibility, communicate appropriately, and strengthen controls through lessons learned.

• Identification and assessment of security events.
• Containment of affected systems where necessary.
• Investigation of root causes and contributing factors.
• Recovery and restoration of services.
• Documentation and continuous improvement activities.

Additional information can be found on our Security page.

Vendor Security Assessment

Third-party vendors play an important role in modern technology environments. Digital 2Moro evaluates technology providers, hosting partners, SaaS platforms, infrastructure vendors, and supporting services before incorporating them into client solutions or internal operations.

Vendor assessments help us understand potential risks, security capabilities, operational reliability, compliance considerations, and long-term suitability.

• Evaluation of vendor security practices.
• Review of privacy and data protection commitments.
• Assessment of operational reliability and business continuity capabilities.
• Review of contractual and service-level considerations.
• Ongoing assessment of critical technology partners.

Additional information is available on our Vendor & Technology Partners page.