05-14-2018 Council Packet - Laserfiche WebLink

Home Browse Search

SECURITY FEATURES Everything we do from designing a new feature to making a change to a system begins and ends with security in mind. We follow best practice from such organizations as OWASP and Cloud Security Alliance to name a few to ensure that we make your data as secure as it possibly can be. Here is all the security information in detail: All communication with the HRWize application is encrypted using 256 bit SSL encryption Hosted in secure facilities accredited to ISO27001 standards with 24/7/365 6 -layer physical security as well as redundant network backbones, firewalls, Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS), dual power feeds, dual generators, dual UPS and dual air handling systems All systems are protected by a dedicated 24/7/365 Network Operations Centre monitoring both hardware and software (as well as physical security, of course) All servers are deployed in a highly available configuration with highly available SAN storage and individual servers all include RAID plus redundant power, cooling and network connections HRWize has been custom built from the ground up using industry accepted programming best practices and with security at the forefront of every design and development decision All HRWize systems are regularly scanned by an external company to PCI -DSS standards against 37,000 known vulnerabilities to ensure our systems are up to date and secure at all times All your data is backed up every 12 hours to an offsite secure storage location —this data is then retained for 3o days to allow us to recover to any point in time in the previous 3o days in the event of an unforeseen and unpreventable disaster Solid security permissions set for various user groups, allowing for strict abidance by R.S.Q., c.A-21 "An Act Respecting Access to Documents Help by Public Bodies and the Protection of Personal Information", Chapter III "Protection of Personal Information" HRWjze � 10