Security Logging, Monitoring and SOC Oversight

Policy status: Approved and actively followed. We maintain operational monitoring, logging, alert review and protected incident records. Effective April 11, 2026.

Purpose and scope

We preserve reliable delivery/security audit trails, protect them against abuse and ensure actionable monitoring.

This policy applies to personnel, contractors, technology and third parties acting for Pingplus Media to the extent of their approved access and applicable agreements. Customer and supplier responsibilities are aligned with our executed contracts and applicable law.

Controls and practices in operation

1. We identify sources of access events, SMPP binds, HTTP authentication, retries, delivery receipts, rejected messages, unusual TPS spikes, firewall/proxy changes, privileged changes and backup failures.
2. We apply access restrictions and time synchronization to log systems; prevent ordinary app users from changing security log records and retain logs according to approved category-specific schedules.
3. We monitor critical availability and suspicious activity at the frequency genuinely staffed or automated; maintain emergency notification paths and on-call coverage as actually contracted.
4. We investigate high-priority detections using incident tickets, assigning severity and owner; avoid storing OTPs/passwords/plain message content in regular notification channels.
5. We conduct a monthly documented sample review of key security/operations logs and close findings through a ticket register; use separate weekly operational log health checks where feasible.
6. We describe security monitoring and escalation coverage according to the automated detection and human response arrangements actively in place, without treating automated alerts as equivalent to a separately staffed SOC.

Review and responsibility

Daily alert handling where configured; monthly recorded security log review; quarterly source and privilege check.

Accountability and reporting

Our personnel, contractors and in-scope service partners follow this policy, with established channels for prompt reporting of suspected security issues. Exceptions are recorded, reviewed and approved by an authorised policy owner. Applicable customer contracts and legal duties continue to govern the services provided.