Anonymous, bureaucrat, administrator
7,528
edits
Changes
From All n One's bxp software Wixi
no edit summary
All n One utilises SunGard's hosting environment in Parkwest business park Dublin. In this environment SunGard use cisco 5510 firewalls for network protection and Cent OS virtual load balancers utilizing TLS negotiation so we can offer TLS 1.2 to users using the latest browsing software and older versions of TLS for legacy software.(IE6 etc.) We also complete vulnerability tests to ensure All n One's cloud security. For additional information on bxps end to end encryption please view the following link - [[Bxp_-_BER8_SER2_-_End_to_End_encryption_and_High_Availability End to End encryption and High Availability]]
As the client data we store is held in Sungard's secure Parkwest facility in our database servers. The processes and procedures for SunGard facility entry include a sign in/sign out policy so unauthorised individuals will not be permitted access to our servers. A visit/call to SunGard can only be authorised by four members of our staff. Our data is stored in this secure facility which means we are able to mitigate against tampering, loss, damage or seizure. We also utalize BitLocker encryption on our database servers so client data is encrypted(256-bit key). We are also fully compliant with the Irish data protection act and client data is deleted once it is older then our back-up storage scope. -
[[Data_Protection_and_Data_Retention Data Protection and Data Retencion]]
All instances of the service are segregated by client. This means that one client instance of the software is unable to get any data from another client system. As the system is a SaaS Solution users from the same system will have to log in using different usernames/passwords. All events that occur from the users are stored in log files so it is possible to review all colleague activity though an audit trail functionality built into bxp.For more information on data segregation view - [[The_bxp_Infrastructure#Logical_Infrastructure The bxp Infrastructure]]
All n One is 80% compliant with ISO 27001 and Cobit 5. All n One currently requires an external audit for validation. Our hosting infrastructure is ISO 27001 complaint which shows that SunGard AS Ireland has developed and implemented a best-in-class information security management system (ISMS) for itself and its customers. For additional information on All n One's certification status view - [[Security_-_Start_Here Introduction to bxp security]]
All n One is 80% compliant with ISO 27001 and Cobit 5. All n One currently requires an external audit for validation. Company policies and procedures are stored in a secure internal network. All n One also supplies the public with a company wikipedia that provides information on the service. Our hosting infrastructure is ISO 27001 complaint which shows that SunGard AS Ireland has developed and implemented a best-in-class information security management system (ISMS) for itself and its customers. For additional information on All n One's certification status view - [[Security_-_Start_Here Introduction to bxp security]]
All colleagues are screened though our HR interview process. All n One strives to provide its colleagues with the safest most enjoyable environment and all HR processes are compliant with the data protection act of Ireland. All colleagues are trained in their field of expertise and are also required to complete a data protection course annually to mitigate against any accidental data loss or data exposure. For more information on our HR and operational processes view - [[Security_-_Start_Here#Operational_Procedures Operational Procedures and Human Resource Procedures]]
All n One complete vulnerability scans on our service and network in order to find issues to mitigate against. This provides us with the high level of security expected from Industry standard. We also have a policy set for developement development work which can be viewed - [[How_bxp_is_developed bxp development]]
Our software is hosted in a 3rd party data center, provided by SunGard. Our other partners include Continuum, NB1 Consult Limited and Sheehan & Associates Accountants. Additional information can be found here - [[All_n_One_Partners_and_Suppliers All n One Partners and Suppliers]]
Clients of the service are told to nominate a security champion for our SaaS Service. This member of staff will be able to use enhanced security features to manage their instance of bxp software (All n One's software). With this the client should be able to manage authentication and seperation of access control within the interface. The system champion will also be able to run reports on the actions of users on their instance of bxp through the audit trail functionality.[[User_Profiling_-_Start_Here User Profiling]] . bxp software also provides a means for data protection automation which can be viewed from the following link - [[Data_Protection_and_Data_Retention Data Protection automation]]
All n One utalises the latest in TLS technology to provide out clients with the most secure login possible. By utalizing utilizing Google's password strength meter API we also have the ability to reject passwords not considered to be "Best" by Google's standards. We also provide the ability to lock down login attempts to only be successful from a particular IP of range of IP's. In order for All n One to manage our hosted servers we have created a secure encrypted VPN connection with SunGard AS. The office in which the operations team work on bxp software developement development is also fully secured with the latest intevo security system from Kantech which was installed by ADT. - [[Bxp_-_Ballymount_Security Ballymount security]]
All n One complete vulnerability tests on all aspects of the service provided. This is done in order to find vulnerabilities that can then be mitigated against to provide a more secure service. We also provide an API for the software (BEAPI) which allows third party systems to interact directly with bxp software. The BEAPI will not grant access by default. It requires EXPLICIT IP address declaration to grant any form of access or engage in any communication. [[Bxp_API bxp API]]
All n One provides a full audit trail to clients of actions completed on their instance of the service. For additional information on bxp audit logs operation view - [[Bxp_-_Audit_Logs bxp audit logs]]
''Consumers have certain responsibilities when using a cloud service in order for it to remain as secure as possible and for their data to be adequately protected.''
We provide a set of guidelines to promote the secure using of our service to these users. The following link has the guidelines for bxp usage - [[You_and_your_bxp You and your bxp]]
