Physical Environment
✓ Secure Areas – IT facilities supporting critical or sensitive business activities are located within secure areas.
✓ Physical Security Perimeter – Strategically located barriers around defined perimeters provide physical security protection throughout the facility where sensitive business activities occur.
✓ Physical Entry Controls – Only authorized personnel can gain access to secure document scanning and processing areas by use of bio-metric finger print scan.
✓ Security of Data Centers and Computer Rooms – Physical security for data centers and computer rooms is established that is commensurate with possible threats.
✓ Isolated Delivery and Loading Areas – The data center and computer room delivery and loading areas are isolated to reduce the opportunity for unauthorized access.
✓ Equipment Location and Protection – Equipment is located to reduce risks of environmental hazards and unauthorized access.
✓ Power Supplies – Electronic equipment is protected from power failures and other electrical anomalies.
✓ Cabling Security – All power and telecommunications cabling is protected from interception or damage.
✓ Equipment Maintenance – Procedures are established to correctly maintain IT equipment to ensure its continued availability and integrity.
✓ Separation of Development and Operational Facilities – Development and operational facilities are segregated to reduce the risk of accidental changes or unauthorized access to production software and business data.
✓ Environmental Monitoring – Host computer environments, including temperature, humidity, and power supply quality, are monitored to identify conditions that might adversely affect the operation of computer equipment and to facilitate corrective action.
✓ Media Handling and Security – Computer media is controlled and physically protected to prevent damage to assets and interruptions to business activities.
✓ System Planning and Acceptance – Advance capacity planning and preparation ensures the proper availability of adequate capacity and resources as customer demands grow.
Network Management
✓ Protection from Malicious Software – Precautions are taken to prevent and detect the introduction of malicious software to safeguard the integrity of software and data.
✓ Virus Controls – Virus detection and prevention measures and appropriate user awareness procedures have been implemented.
✓ Network Monitoring – Security of computer networks are monitored 24x7 and managed to safeguard information and to protect the supporting infrastructure.
✓ Network Security Controls – Appropriate controls ensure the security of data in networks and the protection of connected services from unauthorized access.
Electronic File Access
✓ 256 K Bit Encryption – Data stored on the file server is encrypted using the maximum encryption available, 256K.
✓ Transport Layer Security – All communication is delivered over an industry standard 128 bit encrypted TLS.
✓ Access Controls – User access to files is strictly granted on permissions basis by authorized administrators according to management approvals.
✓ Active Directory Integration – You can manage your users from Active Directory ensuring you only need one user store.
