SaaS Security for the Confirmit CustomerSat Software

Transcription

1 SaaS Security for the Confirmit CustomerSat Software July 2015 Arnt Feruglio Chief Operating Officer

2 The Confirmit CustomerSat Software Designed for The Web. From its inception in 1997, the architecture and code of the CustomerSat product has been designed to operate online. We started offering Software as a Service long before the SaaS term was ever invented. Continue to Make Significant Ongoing Investments to ensure it remains modern. This allows us to take advantage of new technologies and thereby boost security, performance, reliability, and scalability. Industry Leading Resiliency. The robust CustomerSat code running on our scalable high-availability infrastructure combined with a 3-tier 24/7 proactive monitoring system provides our SaaS clients with the highest levels of security, performance and availability in the industry. 2

3 Security in User Administration Granular Access Control: Confirmit CustomerSat offers detailed data access control of accounts, surveys, and even specific question responses. Fine Grained Account Permissions: User abilities to use, view, and change their accounts can be controlled at extremely detailed levels including general account access, functionality changes, access to reporting, ability to deploy surveys, etc. Multiple Levels of Login Controls and Protection: SSL is enforced for all application access by Confirmit employees. HTTPS/SSL is enforced for all user logins and for the duration of the session. Complex passwords with minimum lengths are enforced Accounts are automatically locked by the system after 3 consecutive failed attempts. Stored passwords are protected by a salted one-way SHA1 hash. 3 Session Expiration: Confirmit CustomerSat automatically closes sessions of SaaS users after a period of inactivity, after which users must reauthenticate to continue.

4 Security of Data Protected In Use : The database servers that store client data are not Internet facing and are protected by 2 tiers of diverse, high-availability firewalls. The data can only be accessed programmatically through the Confirmit CustomerSat application engine. Protected At Rest : For application data residing outside of the RackSpace facilities, Confirmit CustomerSat implements AES-128 encryption through SQL Server Enterprise TDE (Transparent Data Encryption) and Microsoft BitLocker. Protected In Motion : Confirmit CustomerSat supports for file imports and exports: PGP encryption prior to transport Delivery via SFTP download and can be combined with additional PGP file encryption Delivery via HTTPS Confirmit can configure its mail server to enforce TLS for connections to target corporate servers if required, ensuring s are delivered over an encrypted connection. 4 Protected Access: Secured Remote Server Access is only available to our system administrators from a specific internal IP range within Confirmit s corporate network and through a secure hardware VPN tunnel. If outside the corporate network, 2-factor authentication is required to establish a secure VPN tunnel.

5 Additional Security Features High Assurance : Survey Taking and Portal Administration using EV (Extended Validation) SSL certificates, providing additional safety visibility and confidence to visitors. Secure Survey Taking: Survey setting allows easy configuration of SSL sessions at a per survey level. Internally, all of our employees with access to client data work on laptops encrypted with Microsoft BitLocker Whole Disk Encryption (AES-256) 5

6 Confirmit SaaS Environment Uptime and Statistics For our largest clients, we ve held up to 5 Million completed responses growing at ½ Million per month We are trusted with Terabytes of client data and growing Industry leading 100% uptime for 2 consecutive years. * as monitored by a third party Quarterly uptime statistics are publicly available at: 6

7 Hosting with Rackspace 7 Environment hosted with world-leading managed hosting provider Rackspace. We are a significant client of Rackspace, with high management visibility. We have been with Rackspace since 2004 and our current agreement extends to Q2 of Rackspace: A recognized world-leading provider of web hosting services (see The data center we occupy is: o SSAE 16 Type II SOC 1 (formerly SAS 70 Type II) examined. o ISO certified. Microsoft Gold Certified partner / Microsoft Hosting Provider of the Year. See (US) and (UK). We use Rackspace's Intensive Hosting, (i.e. not co-location or the standard/reactive Managed hosting ). This means: Highest available SLAs Dedicated service delivery team with SLM and technical specialists dedicated to our account Aggressive hardware replacement guarantees.

8 CustomerSat: Not a Cloud-Based Service Confirmit CustomerSat offers Software as a Service (SaaS) that is available worldwide, over the Internet, and accessible through web browsers. This doesn t make CustomerSat a cloud-based service. Why?: Cloud providers often use a hosting solution where their infrastructure is provided by the cloud provider as either Infrastructure as a Service (IaaS) or Platform as a Service (PaaS), such as Amazon s EC2 or Microsoft Azure. With such providers, the underlying infrastructure is usually shared between the provider s many customers. Data is also comingled between customers across systems or datacenters and there is usually no dedicated security infrastructure to provide additional security for the data hosted on these services. Confirmit delivers SaaS using: Although Rackspace also offers cloud services, Confirmit does not utilize any of these service for its SaaS offering. The Confirmit SaaS service is accessed in the same way as any cloud service, but the main differences are: Servers dedicated to Confirmit A known datacenter Dedicated Confirmit Firewalls A known location A traditional server platform Managed by Rackspace We know exactly where your data is located The servers hosting the data do not host or process any data for other Rackspace customers (even the VMware hypervisors are dedicated to running our virtual infrastructure) Database servers are separated from virtual infrastructure and run on dedicated hardware We have a dedicated, redundant network security infrastructure protecting our equipment 8

9 Network Architecture High Level Overview Segregated Network Tiers Separate manufacturers for Front and Back-end Firewalls Fully Redundant, Load balanced web servers Clustered database servers N+1 design for redundant pools Multi-homed fiber channel network 9

10 SaaS Hosting Environment Security State-of-the-art physical building security at Rackspace: On-site security personnel monitor the data center buildings 24/7. Live CCTV surveillance of the entire data center building is monitored 24/7. Biometric hand scanners are used to restrict access to the Rackspace data center. Multiple levels of security are employed to ensure that only Data Center Operations Engineers are physically allowed near the hosted routers, switches, and servers. All critical systems in the DC are N+1 redundant to provide uninterrupted availability, e.g. Power Distribution Units, UPS systems, NIC teams, cluster failovers, SAN fiber connections, redundant switches, load balancers and firewalls. Weekly tests are conducted on all HVAC, UPS, fire suppression, and generator systems. Standardized hardware and software supplied by industry leading vendors is used for all parts of the delivery chain. Clustered database servers with SAN storage (EMC arrays) for high availability. All network infrastructure devices are configured in high availability mode, providing a fault-tolerant network for 100% guaranteed network uptime from the hosting provider. F5 powered load balancing with offloaded SSL acceleration is utilized to ensure highest availability and performance. Threat Manager / Intrusion Detection Systems provided by Alert Logic, and monitored 24/7. Daily backups. Weekly full back-ups encrypted (AES 256) and sent for off-site storage for 12 months with Iron Mountain. Complete SaaS environment documentation available under NDA. 10

11 Data Privacy 11 The US data center (Rackspace, Inc) and our US entities (Confirmit, Inc and CustomerSat.com, Inc) are Safe Harbor Certified, Thorough back-to-back data flow framework in place to address regulatory requirements relating to all parties involved on our end. See diagram on the right. We will be happy to talk through this with your data privacy specialists. Information security is a key element of our operational procedures. Our Information Security Policy is based on the ISO framework. After thorough security reviews, a number of global banks, insurance companies and enterprises have selected Confirmit as their provider of data collection and reporting services.

12 Disaster Recovery Plan Because we believe in leaving nothing to chance To ensure continued delivery of Confirmit CustomerSat services in the unlikely event of a disaster at the primary facility, we have developed and maintain: A fully tested DRP (Disaster Recovery Plan) A DRS (Disaster Recover Site) located ~2000 miles from our primary site RTO (Recovery Time Objective) of 24 hours from DRP initiation RPO (Recovery Point Objective) of 24 hours from disaster DRP successfully tested Sep 2013 and updated April 2014 *The DRP is updated/tested as needed, commensurate with changes to the primary hosting environment. 12

13 Security Testing / Ethical Hacking Confirmit contracts independent third party security specialists to run application testing of the Confirmit Professional software. The tests are conducted annually. Application testing: We grant a user a valid password and User ID to the Software, and see if they can hack the system, i.e. gain illegitimate access to data, compromise the Software, etc. Relevant findings are reviewed, remediation is performed and a follow-up retest is carried out. Transparency: A report is made available to clients upon request. We remediate all Critical, High and Medium risk findings and assess any low risk items. Retest results from the test completed by Emagined Security, October 2014: 13

14 Three tier proactive 24/7 monitoring 1. Confirmit monitors the hosting environment and the Confirmit application 24/7 through a proprietary NOC monitoring system. The system polls, with high frequency, critical application statistics, health checks, and availability tests. and SMS pages are triggered automatically if irregularities are detected or thresholds exceeded. 2. Rackspace monitors the SaaS 24/7 by means of 3 applications: Microsoft (SCOM), SiteScope and a proprietary application called RackWatch. The 24x7 Rackspace staff notify Confirmit engineers of severe issues persisting for more than 15 minutes. Webmetrics Rackspace Confirmit Neustar Webmetrics performs external 3 rd Party monitoring of availability and response times: Polling is performed from over 100 locations worldwide.

15 Thank You Arnt Feruglio COO July 2015