|
Secure Data Storage...
Security of your data is critical to both our businesses. The following
measures are taken to ensure its safekeeping in our data center:
Physical Security
Physical access to our servers is restricted. They are located in a key-pad
controlled, lockable, temperature-controlled computer room with an
un-interruptible power supply. Servers are housed in a computer rack whose
access is tightly controlled.
Network Security
All production servers are isolated on a private segment of the hosting center
network without publicly routable IP addresses. Direct access to these servers
from outside the data center is not possible.
Operating System Security
Each server is protected by host operating system security. On all platforms,
each executable, data file, and directory is independently given read, write,
and execute access on a per-user or per-group basis.
Database Server Security
We have implemented restricted access to the Data Archive and the Point Database
beyond what is provided by physical, network, and operating system security. We
have the ability to:
- Restrict access to the database server
- Control access to point attributes and/or data
Firewall Security
The firewall allows us to control access to the Data Archive at the IP address
level. We manage all connections to the database, including subsystem
connections and TCP/IP applications. We screen access based on the IP address
of the machine trying to access the data.
Database Security
Database level security controls which users and groups can edit a specific
table; for example, to create a point. Performance equations are considered
another form of database point and are therefore protected through the same
point security.
Point Security
Point attributes (zero, span, descriptor, etc.) have one access level and the
point data values (snapshot and archive data) have another. Thus, it is
possible to have different owners and different access for point attributes than
for point data. Access levels are of three types:
- Read and write
- Read only
- No access
|