Information & Product Security Principles

Microboard treats security as an ongoing responsibility.

Information-security principles

• confidentiality, integrity and availability;
• legitimate need-to-know and least privilege;
• strong authentication and credential protection;
• system patching and updating;
• risk-based backup and recovery;
• protection against malware and phishing;
• appropriate logging and monitoring;
• incident management;
• third-party risk management;
• security in technology acquisition and configuration;
• risk-based training.

Personal data

Security controls should support LGPD principles and obligations.

Third parties

Suppliers with access to data, systems, firmware, designs or infrastructure should be subject to appropriate security and confidentiality requirements.

Product security

As Microboard Computing evolves, product architecture should incorporate security-by-design requirements, including where applicable:

• secure boot;
• protected firmware and BIOS/UEFI;
• TPM and device identity;
• signed updates;
• vulnerability management;
• logging and diagnostics;
• lifecycle and support definition;
• vulnerability-reporting process.

These are design principles, not claims that such features are already available.

Information-security management

Microboard adopts information-security principles based on risk management, access protection, confidentiality, integrity, availability and continuous improvement.