The security of your CASM data is of utmost importance to us. Our commitment to security will ensure that your data is safe and secure.
Access to your CASM Data
Your company is protected by your username and password. No one else has access to your company information unless you have invited them. In which case, they too will have access to your company information, but using their own username and password.
If you are logged in and don’t use CASM for an extended period of time, you will automatically be logged out.
Your CASM data is stored in a managed hosted environment at a secure physical location with 24/7 armed security personnel and offsite monitoring via CCTV. All physical equipment is also housed in a security controlled and monitored centre. Access to the data centre is restricted to authorised personnel only.
Firewall and Intrusion detection: CASM operates behind an industry-standard firewall. This firewall ensures that only intended traffic reaches the CASM service. The firewall generates logs and alerts which are reviewed on an ongoing basis to determine intrusion, service attacks and injection attempts.
All systems are reviewed on an ongoing basis to identify possible weaknesses or new vulnerabilities. System event and system logs are reviewed on an ongoing basis to identify possible intrusion attempts.
Industry-standard monitoring technologies are in place to continuously check that the CASM server is available. This ensures that the physical environment is monitored and any system hardware or software errors are resolved within the shortest possible time thereby minimising downtime.
Your CASM data is backed up daily. Backups are stored for up to two weeks. Data is stored in two alternative locations, accommodating multiple points of failure.
The information you send to and retrieve from CASM is encrypted. CASM utilises a security certificate obtained from a reputable certificate provider. This certificate is fully authenticated and verified, encrypting your data with up to 256-bit encryption (browser dependant) ensuring that your data is safe.