Stepps Security Commitment

Stepps takes the privacy and security of our clients’ business data very seriously.

Technologies are transforming the modern real estate industry at a rapid rate. With the growth of connected devices, systems, platforms, and services providing individual agents and businesses with smarter and more effective digital solutions, Stepps recognises the need for a strong focus on cybersecurity to protect the potential offered by this interconnected, data-driven energy model.

At Stepps, we create and provide products and services centred around positive customer experience and high-quality solutions to meet the highest security standards. That focus governs how we approach cybersecurity across our business.

Stepps takes a multi-layered approach to ensuring safety and security. Because technology and cyber threats continue to evolve, we continuously evaluate and adopt security measures. Cybersecurity practices embedded in our business processes help protect the confidentiality, availability, and integrity of data – and the systems it comes from – throughout our product and service lifecycles.

Our commitment to cybersecurity is highlighted by five key areas:

• Security-integrated development – We conduct cybersecurity review(s) and analyses to actively consider security and include appropriate control measures as we build, test, and deploy our new products, services, or platforms or when we update existing ones.
• Internal and external security testing – We manage a testing program, leveraging internal and external expertise, to conduct a range of security tests to align our devices, products, and systems with current cybersecurity standards and to address current threats and risks.
• Partnering with industry – We work together with partners to better assess trends, share threat information, and establish standards that protect our clients’ digital systems. The risks posed by cyberattacks and compromised systems can impact the real estate industry, and collaboration on cybersecurity challenges is critical to maintaining public trust in our industry.
• Continuous threat and risk analysis – We strive to identify and address new and evolving threats and risks by collaborating through security information-sharing agreements and our internal monitoring in order to deploy cybersecurity controls that will help improve safety and security.
• Privacy awareness and protection – The Stepps Privacy Policy sets forth our commitment to our customers and partners on the collection and use of personal data. Our cybersecurity efforts help to protect not only our products and services but also the data that we collect.

Zero Trust:

Zero Trust is a security framework requiring all users, whether in or outside a network, to be authenticated, authorised, and continuously validated for security configuration and posture before being granted or keeping access to applications and data. Zero Trust assumes that there is no traditional network edge; networks can be local, in the cloud, or a combination or hybrid with resources anywhere as well as workers in any location.

Zero Trust is a framework for securing infrastructure and data for today’s modern digital transformation. It uniquely addresses the modern challenges of today’s business, including securing remote workers, hybrid cloud environments, and ransomware threats. While many vendors have tried to create their own definitions of Zero Trust, there are a number of standards from recognised organisations that can help you align Zero Trust with your organisation.