Security Officer Management System Platform Security

There are few, if any, security officer management systems that are built on a more secure platform than AccountAbility. DEMO or call (800) 688-9633 today. 

Security Fundamentals

• • • • TLS encryption (HTTPS) for all data in transit.
      • Data is encrypted while at rest.
      • Enterprise database, Microsoft SQL Server.
      • AWS Infrastructure (Amazon Web Services).
      • Hosted in AWS climate controlled, access controlled, oxygen suppression fire controlled secure data center.
      • Server maintenance and platform upgrades are performed frequently and as often as needed.
      • Redundant machines and data backups are on permanent standby in the event of a serious incident.
      • Extensive policies and procedures established, enforced, and regularly audited relative to general security and employee access.

 

Platform Security Summary

The vast majority of AccountAbility Global customers are security industry service providers; therefore, nothing is considered more important in our organization than protecting our customers’ data from unauthorized access or loss.

We have built a data-security centric culture into our company that reaches every department and employee in our business operation. It’s manifested in the security features of our platform, the selection of our technology partners, vendors, employees, internal training, company policies, adherence to best practices and ongoing system software and infrastructure development.

The following is an overview summary of AccountAbility Global security measures. Please note that some details have been excluded in order to protect the integrity of certain security provisions incorporated in the platform.

Physical Layer

AccountAbility Global is using a combination of Amazon Web Services (AWS) and Caspio as its infrastructure providers. AWS has built a reputation for providing some of the most secure and best-run data centers in the world. Caspio is well known for its low-code, secure, and responsive web applications.

AWS and Caspio Certifications Include

SOC 1 and 2 / SSAE 16 / ISAE 3402 Certified (formerly SAS70) SOC 3 Certified, ISO 27001 Security Certified Authorized by U.S. General Services Administration to operate at the FISMA Moderate level Capable of supporting Payment Card Industry (PCI) compliant applications, compliant with GDPR, and more.

Compliance & Certifications

These compliances and certifications ensure that AWS and Caspio adhere to the most stringent security standards that meet or exceed the requirements of some of the most sensitive data and applications in the world.

Network and Systems Layer

Our servers and firewalls are configured to allow only the absolute minimum level of access. All unnecessary users, protocols and ports are disabled and monitored.

O/S, Third Party Soft & APls

Operating systems and third-party software including APls (where applicable) are kept current with the latest upgrades, patches recommended by their vendors, and are subject to recurring security reviews and internal reporting requirements.

Database Access

Our databases and backups can only be accessed through trusted and secure authentication.

• • • • Human Layer

All data maintained in your AccountAbility Global account is owned by you. Only a few select, qualified and authorized personnel are allowed access to data and servers when necessary for system management, maintenance, monitoring, and backups.

• • • • Hiring Practices

We follow rigorous hiring practices that require every administrative, IT, support, and sales candidate undergoes a background check.

Access To Your Account Data

Our support engineers may only access your account when explicitly authorized by you to resolve problems or issues reported by you or to address issues for which we are contractually authorized.

Application Layer

The AccountAbility Global platform offers an extensive list of features to help you protect and secure your account and data.

Account Authentication

Your account is protected by your Account ID and password. We encourage you to use strong passwords, protect them from others, and change them often. You are advised to only access your account from trusted devices and networks. We do not store sensitive user data in cookies or utilize other high-risk user or session tracking methods.

Data Encryption

When you log into your AccountAbility Global account, your session is secured with SSL encryption. You also have the option of completely blocking non-SSL access to your data and applications.

Web User Authentication

You can apply Web User Authentication to your apps. This capability is a standard AccountAbility Global feature and helps you prevent unauthorized users from accessing your apps and data. You can have an unlimited number of authenticated users for your applications.

Additional, Detailed Information Available Upon Request. (800) 688-9633