Security policies & action plans
Document, implement and govern security policies aligned with your industry regulations.
✦ Information Security
Information Security
Security policies, multi-factor authentication, regulatory compliance and protection for high-criticality systems.
Drakkar
Information Security
✦ Why it matters
Security, compliance and continuity
We help enterprise and financial organizations implement security policies and technical controls aligned with the most demanding regulations, including BACEN Resolution 364. From SSO and MFA rollouts to full compliance programs.
Why it matters
- Aligned with BACEN Resolution 364 and similar frameworks
- Multi-factor authentication: SSO + TOTP
- Security policies and incident-response playbooks
- Continuous protection of high-criticality systems
- Audit trails and compliance reporting
✦ What We Offer
What we deliver
Multi-factor authentication (SSO + TOTP)
Roll out enterprise SSO with TOTP-based MFA across your applications.
Regulatory compliance
BACEN Resolution 364, LGPD, GDPR, HIPAA: we map controls to requirements and prove compliance.
High-criticality system protection
Hardening, monitoring and continuous protection for systems where downtime is not an option.
Security architecture review
Independent review of your application and infrastructure security posture.
Incident response & playbooks
Be ready when incidents happen, with documented playbooks and trained teams.
✦ Process
How we deliver
From assessment to continuous protection.
- 01
Security assessment
Map current posture, regulatory gaps and critical assets.
- 02
Policies & roadmap
Document policies, prioritize controls and define a phased rollout.
- 03
Technical implementation
Roll out SSO, MFA, monitoring and hardening across systems.
- 04
Continuous monitoring
Ongoing audits, training and policy updates as your environment evolves.
✦ Results
Compliance & security work
Regulated environments, real outcomes.
✦ Caixa + Fiserv (Brazil)
BACEN Resolution 364 compliance
Tribunais Portal fully compliant with BACEN Resolution 364: financial-grade security for judicial debts.
✦ County of San Diego (USA)
Government-grade access control
Public-service applications with strict access control and audit trails.
✦ Tech Stack
Frameworks & standards
- BACEN Resolution 364
- LGPD
- GDPR
- HIPAA
- ISO 27001 (alignment)
- SSO (SAML, OAuth, OIDC)
- TOTP MFA
✦ FAQ
Frequently asked questions
Do you handle BACEN Resolution 364 compliance?
Yes. We delivered Tribunais Portal, a Caixa Econômica Federal product, fully compliant with BACEN Resolution 364, with monthly evolution since 2024.
Can you implement SSO across our existing apps?
Yes. We integrate SAML, OAuth and OIDC providers (Azure AD, Okta, Google Workspace) with your existing applications and add TOTP MFA on top.
Do you support LGPD and GDPR adequacy?
Yes. We map technical and organizational controls to LGPD and GDPR requirements and help you demonstrate compliance.
What does "high-criticality" mean here?
Systems where downtime, data leaks or fraud have direct financial, regulatory or human impact: fintech, healthcare, government, energy.
Do you offer ongoing security monitoring?
Yes, as part of our ITSM/AMS contracts we offer continuous monitoring, audits and incident-response support.
Let's Talk
Protect what matters most
From compliance roadmaps to MFA rollouts, we deliver enterprise-grade security.
Talk to a security specialist