Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleHas your organisation implemented segmentation or segregation in your networks and/or cloud environments?

Has your organisation implemented segmentation or segregation in your networks and/or cloud environments?

Yes. XXXXX

We implement segregation on the user role level, preventing users from accessing features and pages that are out of their provisioned access.

We implement segregation between customer accounts. The product is one system shared between customers with security policies in place to only enable access to customer relevant data. Data is segregated from other customers through the use of dedicated subdomains, user credentials authentication, and organisational identifiers within the product.

Expand
titleDoes your organisation secure and encrypt all data transfers using an appropriate control/protocol (for example, SFTP, HTTPS), and are all data transfers subject to review and authorisation?

Does your organisation secure and encrypt all data transfers using an appropriate control/protocol (for example, SFTP, HTTPS), and are all data transfers subject to review and authorisation?

Yes. All connections to the platform are via HTTPS with data transfers using secure FTP services.

...