Security

Secure hosting centre within the EU (our primary hosting centre in England)
All data transmission is secured with SSL encryption
Certified under the Government's Cyber Essentials Scheme
Comprehensive disaster recovery
Full daily and weekly back-up schedule
Applications have a multi-layered security model with access control at record level
Login strictly controlled - access via dual factor authentication once user accredited

Standards Matter

Globocol implement security practices based on industry standards and best practice including ISO 27001-27002 and the UK government's Cyber Essentials scheme.
ISO 27001-27002 — Our core security practices are based on ISO 27001-27002. These practices provide control structures for Risk Analysis, Physical Security, Emergency Planning, Investigations, Information Protection, Education, and more.
SAS 70 / SSAE 16 — Independent organizations audit the Connections service to verify that IBM is in compliance with defined control points. Effectiveness of these controls are tested annually using a SAS70 / SSAE 16 business controls audit.
EU Data Privacy — IBM Connections adheres to the U.S.-EU Safe Harbor framework.
Cyber Essentials — Globocol are certified under the Cyber Essentials scheme
DfE Cloud Service self-certification - Globocol are certified to this scheme also

Your Data Belongs to You

Globocol understands the importance and sensitivity of your data.
Your Data is Yours — Any content you store or create within our cloud applications is yours.
No Advertising or Data Mining — we do not mine your content and data or leverage your user interface to deliver online advertisements.
Data Portability — You can download or remove content, data, and files from the service.
Transparency — As our customer, you should be comfortable knowing where your data is stored. Our service does not fragment customer data across locations, and we are able to tell you in which of our data centres your content is stored.

Security-Rich by Design

Our security is designed with emphasis on maintaining security-rich physical infrastructure, configuration, architecture, business processes, and operations. From code development to the physical security of data centres, and through all customer support interactions, our service is designed with security in mind.

Policy and Process

Globocol maintains security policies that are re-evaluated annually.
Our security practices take a broad range of factors into consideration, including technological, human, and natural; and threats from both outside as well as inside of an organization.
Modifications to applications and the operating environment are governed by a strict change control process.

Physical Security

Our data centres maintain physical security standards designed to restrict unauthorized physical access to data centre resources.
Data centres are guarded with biometric controls on all physical access points, CCTV monitoring and recording, redundant component, network and power sources, and state-of-the-art firewalls.
Access is restricted to authorized individuals and is based on multi-factor authentication

Access Control

Our system architecture is designed to maintain logical separation of client data. Access to client data is allowed only by authorized Globocol support representatives. Our support staff uses multi-factor authentication when accessing client data. Access is logged.

Service Integrity & Availability

Strong encryption protects data in transit and at rest. Globocol's data centres services are monitored 24x7. Internal and external vulnerability scanning is regularly conducted by authorized administrators to help detect and resolve potential system security exposures.
Real-time intrusion detection, virus, spam and malware detection add essential defence layers.
Our highly available cloud infrastructure protects services from single points of failure, and from data tier or data centre failure.

Enterprise-grade Controls

Globocol includes safe defaults on all shared data assets, and provides extensions and add-ons for auditing, monitoring, and data-retention.

If you have any questions regarding the security of Child Safeguarding Solutions software please get in touch.

Trust and Security