Skip to content

Infrastructure security

Data centre security

Apteco data centres hold certifications from several standards bodies. These include the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). They also include the Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR) programme, which uses the Cloud Controls Matrix (CCM).

The data centres for Apteco Cloud have certification for compliance with the following standards:

  • ISO/IEC 27001:2013
  • ISO/IEC 27017:2015
  • ISO/IEC 27018:2019
  • ISO/IEC 27701:2019
  • ISO/IEC 9001:2015
  • CSA STAR CCM v3.0.1

Professional security staff control physical access to data centres at building ingress points, utilising surveillance, detection systems, and other electronic means.

Firewalls and network

Apteco divides the Apteco Cloud network infrastructure into two subnets:

  • Public: the gateway to Apteco Cloud is on the public subnet.
  • Private: customer Apteco Cloud instances live in the private subnet.

Firewall security rules restrict incoming traffic to the public subnet and between the public and private subnets. The HTTPS secure communication protocol restricts public traffic. Further network security rules and practices are in place to limit access to Apteco Cloud systems. Hardware and software firewall solutions from a global leader in cybersecurity protect the Apteco internal networks. Apteco also provides monitoring and support every day.

Operating system security

Apteco hardens the operating systems used to run Apteco Cloud systems to Center for Internet Security (CIS) Level 1, the recognised industry standard. Apteco regularly maintains the operating systems with security patches from the operating system vendor.

Maintenance and monitoring

Apteco Technical Services employees regularly monitor Apteco Cloud. This helps identify potential problems and maintain the smooth running of Apteco Cloud systems.

Vulnerability scanning

An independent third-party security consultancy scans the Apteco Cloud infrastructure and internal Apteco business systems every week.

Disaster recovery and business continuity planning

Apteco has practices and technologies in place to enable continued business activity in the event of a disaster.

Off-site and cloud-based backups let the business keep working efficiently and remotely if the office becomes unavailable. Support functions, pair programming, and other development practices maintain shared knowledge and avoid a single point of knowledge failure.