|
|
 |
|
|
|
|
|
|
|
Convoke System’s Data Governance Program has been implemented to ensure the safety, integrity and privacy of consumer and customer data. The Program identifies information security risks, implement a strategy to manage the risks, regularly test the implementation of the strategy, and continually monitor the environment to control the risks.
|
|
|
Benefits
|
|
|
- Protects against anticipated threats or hazards to the security or integrity of customer information
- Protects against unauthorized access to customer information that could result in substantial harm or inconvenience to the customer
- Ensures the proper disposal of information
- Ensures compliance with all applicable legal, regulatory, and contractual requirements
- Ensures compliance with applicable standards including PCI DSS, GLBA, SAS70 and ISO 17799
|
|
|
Features
|
|
|
Data Privacy
|
|
|
- SSL, 128 bit encryption, 3DES
|
|
|
Perimeter Security
|
|
|
- Firewalls, Routers, Switches, Virus Scanners, Content Filters
|
|
|
Identity Management and Access Control
|
|
|
- Authentication – Identification of users, hosts, applications, services etc
- Authorization – Controlling access to resources (e.g. ACL)
|
|
|
Security Monitoring
|
|
|
- Intrusion Detection Systems
- Vulnerability Testing
- Logging
- Reporting
|
|
|
Policy Management
|
|
|
- Information Security Policy
- Security Organization
- Personnel Security
- System Deployment
- Continuity Planning
- Quarterly Security Council reviews with CISO and Certified Security Specialists
- Third-party and customer-sponsored penetration tests and vulnerability reviews
- Regulatory Compliance (ISO 17799, GLBA, PCI DSS)
|
|
|
Facilities
|
|
|
- Physical security with camera, motion detection, 24x7 guards
- Multi-level authorization including access list, PIN, and sign-in at multiple checkpoints
- Multiple firewalls and access control lists (ACL) between each layer of three-tier architecture
- Redundant connectivity, firewalls, intrusion detection, load balancing, network, and power
- High speed, high capacity, fiber optic NAS/SAN storage
- Weekly and daily backups, with off-site, third party vaulting
|
|
