Skip to content

    Securitate & Conformitate Cibernetică

    Cum protejăm datele și sistemele cu care lucrăm și ce obligații legale de securitate cibernetică respectăm.

    Ultima actualizare: Septembrie 2026

    Security Statement for Iteams.ro

    At ITEAMS SRL, security is part of how we deliver IT outsourcing services. We protect our clients' data, the systems we operate, and the integrity of the projects we deliver, in line with the Romanian and European cybersecurity legislation that applies to us.

    Regulatory Compliance

    We follow the Romanian cybersecurity rules that apply to us and to the engagements we support, including Emergency Ordinance no. 155/2024, which transposes the NIS2 Directive into national law.

    • NIS2 Directive & Romanian Law: We assess the risks to the systems we operate and apply security measures proportionate to them.
    • Incident Notification: We are prepared to notify the National Cyber Security Directorate (DNSC) of any significant incidents and to register as an essential or important entity if applicable.
    • Rapid Response: We communicate cyber threats, incidents, and vulnerabilities to the relevant authorities where required by Law 58/2023 and its methodological norms.

    Technical and Organizational Security Measures

    The security practices we apply in our work:

    • Security-First Delivery: We apply technical and organizational measures including encryption in transit and at rest, access control, and least privilege.
    • Infrastructure Protection: We use firewalls and keep devices and software up to date with security patches.

    Incident Management and Response

    How we handle security incidents:

    • Monitoring and Detection: We monitor the systems we operate for suspicious activity; the scope of monitoring and alerting is agreed per contract.
    • Rapid Containment: In the event of a cyber incident, we act to contain the threat, investigate its source, and limit impact.
    • Reporting: We report and document incidents as required by Romanian law, including the technical information and impact assessments authorities request.

    Staff Awareness and Training

    Security depends on the people doing the work:

    • Team Practices: Our team follows our security, data protection, and incident response practices.
    • Access Controls: System and data access is granted only to authorized people, based on role and need (least privilege).

    Client and Project Security

    Security terms are set per client engagement:

    • Contractual Safeguards: Our outsourcing agreements set out the security responsibilities, controls, and procedures for the systems, networks, and equipment involved in service delivery. Service levels are agreed per contract.
    • Confidentiality: We keep client data and project information confidential through contractual and technical safeguards.

    Continuous Improvement

    Security is an ongoing commitment that evolves with emerging threats:

    • Legislative Updates: We follow changes in Romanian and European cybersecurity laws and update our practices as needed.

    Our Security Commitment

    We work to keep the environments we operate secure for our clients and partners. The specific security measures and responsibilities for each engagement are agreed in the contract.

    Security Inquiries

    Have questions about our security practices? Contact us.