ES
EN
ZH
Management framework
Comprehensive Risk Management
Risk management is a set of elements (policies, procedures, organizational structure, documentation, among others) that seek to prevent risks from materializing or reduce their impact.
We have an integrated risk management system based on the ISO 31000, 27000 and 22301 management frameworks, covering the following elements:
Business Continuity
Kushki recognizes the existence of threats of technological, human, health, social, natural or catastrophic origin that can affect everything from day‑to‑day operations to the continuous performance of its economic activity. For this reason, Kushki has defined a mitigation strategy through its Business Continuity Plan.
Absence of critical personnel
Occurs when the employee who executes the process is unable to attend work to perform the activities of their role.
Inability to access the workplace
When employees cannot access their normal workplace due to unforeseen situations such as: natural disaster, contagious disease, terrorist activity, transportation problems, strikes, among others.
Failure of technology services
When hardware, software or technology services experience failure(s) or prolonged interruption of communications caused by corrupted data, component failures, application errors, human errors, etc.
Total disaster
When the critical processes of Kushki cannot be executed as a result of earthquake, fire, terrorism, flooding, etc., directly affecting the company and/or its clients.
Absence of critical external suppliers
When the activities of a critical process executed by a specific supplier are affected by failures in their operation. In this case, the supplier must have its own BCP, which must be tested jointly with Kushki.