Revision as of 19:10, 20 April 2015

1 Intro

The operational and development office of All n One is 48 / 49 Western Parkway Business Park, Lower Ballymount Road, Dublin 12.

This document provides information on the development environment and its security controls.

N.B. No client data is stored on this site.

2 Physical security

• ADT live video recording
• ADT motion sensors and contact points
• ADT Door swipe cards
  • Different zones / different permissions
  • Non staff guided access
• Physical Keys
  • Lockup sequence
• Monitoring
  • Fire monitoring
  • Security monitoring

3 Operational security

• Departments
• Clean desk policy
• Security checks (monthly)
  • Checklist template
• Ticketed work

4 Network Configuration

Please review All_n_One_Infrastructures for further information

5 Facility Maintenance

At AllnOne we have certain procedures that we follow in order to stay compliant with many standards and to provide a safe and secure working environment for our employees.

These procedures are as listed below.

5.1 Power Supply

Our electricity is provided to us by Energia this provides us with a highly reliable service as they are one of the largest independent energy suppliers in Ireland supplying over 65,000 customers with electricity. Since we started operating out of our Ballymount facility in 2005 we have never had a drop of power from our provider.

In All n One we practice energy efficiency where possible we do this by turning of lights when they are no longer of use and every night turning off all the flip switches to our fuse box to cut the power on the floor.

In the unlikely case that power is lost from our Electricity service provider we have an onsite UPS solution ( XXXXX further details to go here)

5.2 Fire Prevention Procedures

Just like in any business scenario we want to have the potential of a fire at its absolute minimum. We do this by implementing fire alarms, fire blankets and fire extinguishers.

• The fire for our building is Chris Thompson. He provides training to all of our staff on fire safety and fire procedures for the company i.e. Evacuation process and how to tackle a fire with the correct extinguisher.
• The health and safety officer for the company is Patrick Jenkins.

We also have a service agreement with a company called Custom Electronics ltd. They provide us with routine check-ups on our fire equipment and alarms and also service this equipment if an issue is found. We have an agreement that every 6 months they will come in and service all of our equipment and replace any faulty of broken items. We also check our fire alarms on a regular basis to make sure they are fully functioning and keep a log book of recorded data. By doing this we are certified as compliant towards the requirements of Irish Standards 291:1986. In our facility we have 16 fire extinguishers of which nine are C02, four are H20, Two are dry power and one is foam. There are multiple signs around the building which state the fire procedures of AllnOne and we encourage people to read them.

5.3 Hygiene/Cleanliness

We have a current service contract with a cleaning company who provide us with a cleaner for our facility. The cleaner comes out twice weekly and just keeps a general maintenance of the area. i.e empty bins, clean surfaces, hoover floors etc. This is in the best interest of our business as getting rid of any excess dust around computers can help maintain a machines life length by not allowing dust to get into the fans/hardware of the computer and in turn cause damage.

5.4 Pest Control

We have a service contract with Complete pest control who do routine visits bi-monthly. The visits include servicing any traps or replacing any old bait. We have never had a pest problem at AllnOnes facility but we always like to have procedures in place so in the event of a possibly pest we will have them eradicated as soon as possible to prevent any damage to cables etc.

5.5 Air Conditioning

At AllnOne there is a necessity for proper air conditioning as we want to keep our machines at an optimum temperature to prevent overheating. Our air conditioning is broken into three locations:

• Ground Floor Open Floor Plan • 1st Floor Open Plan • 1st Floor Comms Room

The Ground floor open is a Toshiba RAV361AH8-P air conditioning unit. This is a refrigerant that produces R-22 gas type which is environmentally safe and is used in most households.

The 1st Floor open plan is a Toshiba RAV461AH8-P air conditioning unit. This is a refrigerant that produces R-22 gas type which is environmentally safe and is used in most households.

The first Floor Comms Room uses a Toshiba RAV-SM562AT-E air conditioning unit. This is a specialized air refrigerant unit as the gas is produces is friendly for our comms room. It produces R-410A gases which is also more environmentally friendly then the R-22 gas and has no chlorine in it.

Our air conditioning service contract is with a company called Paragon. They maintain our air conditioning units and do a routine service every 6 months. In addition to this is we notice any issue with the air conditioning they will send a representative out to us to rectify the problem.

5.6 Perimeter Security

AllnOne’s premises is protected by the highly reputable security group XXX. They provide surveillance for the surrounding area and lock the gates to the business park every night at 7pm and open them every morning at 6am.

XXXX - Access controls security details to be updated here XXXX

5.7 Internet Connections

At AllnOne internet connection is vital to how we operate. Currently we rent two internet lines from Eircom. We have utilised these two lines by splitting them up.

5.7.1 Line 1

This is the line that holds our cabled network connection. This includes all wired computers in the building and servers and the 3cx phone system. The router/modem is connected to a switch, the switch is then connected to 3 patch panels. The patch panels are connected to Ethernet lines and at the other end of those lines are access points for the PC’s in the building. The Wi-Fi on this router has been turned off to increase the security of a possible intruder getting into the network as he must be directly wired in. We also do not leave any open Ethernet ports available so any that are not in use are disconnected from our patch panel.

5.7.2 Line 2

This is our secondary line at AllnOne. The main purpose of this line is to facilitate for mobile devices of our staff or clients who want to use WIFI enabled devices while on the premises. We do not use this network to do any secure work or alterations to BE’s system. In addition we change the wireless password on a monthly basis for security purposes and also to stop users who have obtained the WIFI password on a previous occasion, strolling around the perimeter of the building trying to use our internet connection.

6 Building Machinery Layout

At our all in one facility we operate machinery in different locations throughout our building. For the purpose of this document we have broken up the sections into what machinery is in what area and how we maintain it.

The building areas are as follows

• Main Floor
• Mezzanine Floor
• Board Room
• Canteen
• Comms Rooms
• Warehouse

All operational All n One machines comply with standard settings, processes and procedures here listed.

6.1 Microsoft Windows Maintenance

Windows security updates are of the upmost importance to the security of our systems.

In regards to these updates we implement them upon release as these patches are designed to close of possible vulnerabilities in the Windows OS. All of our machines have a windows update scheduled set to check and implement any windows updates every day at 16:00. We also will spot check computers occasionally to make sure the updates have been implemented correctly.

6.2 Anti-Virus

Anti-Virus protection is vital to our security measures here at All n One we implement anti-virus software on all of our machinery. Anti-virus scans are run in real time and full system scans are run on our computers every forth night. This insures that there is no malicious software on our computers and by following this procedure we have never once had a virus on any machine in question.

6.3 System Optimizer

In All n One we have implemented CCleaner as our system optimizer software, privacy and cleaning tool. It removes unused files from our system - allowing Windows to run faster and freeing up valuable hard disk space. It also cleans traces of your online activities such as your Internet history. Additionally it contains a fully featured registry cleaner. But the best part is that it's fast (normally taking less than a second to run) and contains NO Spyware or Adware. As this system optimizer is very fast to use and its benefits are huge in regard to freeing up hard disk space on out main floor computers we schedule to run this software weekly.

6.4 Spyware Protection

We use Spybot Search and Destroy as our main on-demand spyware scanner. It is used to scan a complete system for active malware; if suspected malware is detected users have the option of removing it. A complete system scan will check for all malware which includes classical viruses. The malware database contains more than 7000 different threats and is constantly being updated. Immunization supports chrome, Firefox and Internet Explorer. Domains known to spread malware are added to this list so they no longer pose a threat. Spybot includes another level of immunization by adding those malicious websites to the Windows ‘hosts’ file. Spybot Free Edition definition files are updated on a weekly basis. We also run full system spybot scans on a bi-weekly schedule. We also have never had a spyware threat on any of computers.

6.5 Software Testing/Hardware Testing

At All n One software and hardware testing on these machines is of big importance to us so we keep a maintenance schedule running for these tests. We generally just run the generic software listed under section 3.1 of our Compac branded computers to make sure everything is running flawless. We also check for any updates to the software that does not automatically update. The hardware testing we run involves checking all of the monitors, mice, key boards, microphones and the machines internal hardware. We do internal hardware tests on yearly basis but if we encounter an issue with the machine we run it on demand to find what part or issue must be fixed/replaced. For this purpose we keep a reserve of computer parts in our warehouse to allow us to fix issues promptly.

6.6 Cabling

In the interest of health and safety we keep all cables maintained and organised so there would be no issue with lose/dangling cables. This also means that are cables are kept with the purpose to avoid any possibility of being damaged. If the case of a cable being damaged i.e power cable, block, VGA, phone line or Ethernet etc. we keep a reserve of these in our warehouse.