Security

You're in safe hands

CPA Global provides the highest level of security to guarantee that your data is never compromised. We know that security is crucially important to
you – and we have made it our top priority. We can deliver unrivalled security and privacy protection for your organisation’s data.

Physical Security
Our hardware facility provides:

• Controlled access managed by 24-hour security staff
• Redundant electrical generators and air conditioners
• Fire detection (infrared and smoke detectors)
• Video camera monitoring and recording (inside and outside the facility)
• Back up equipment to ensure servers are always up and running

Network Perimeter Protection
The network perimeter is protected by redundant high-availability fi rewalls, working alongside a hostbased Intrusion Prevention System. In addition, we have quarterly internal security audits, as well as an annual full vulnerability and penetration test
conducted by an external vendor.

Application Security
Customers are able to define user access privileges based upon their existing internal security structure. Built-in application security components ensure that export control and outside counsel access rights are strictly enforced.

Data Security
All data remains the property of the client. Administrative access to the hardware and
software environment is restricted to FoundationIP Operations staff and hosting centre staff that perform system management, maintenance, monitoring, and backup functions.

Data Encryption
We use robust encryption products to protect your data and communications, including 128-bit Trustwave Secured Socket Layer (SSL) Certifi cation. The locked padlock icon in the browser status bar indicates that data is encrypted to make it secure while in transit.

User Authentication
Individuals can only access FoundationIP by using a valid user name and password. Login details are encrypted via SSL during transmission. For added security, the session key is automatically scrambled after a given period and the user is required to enter login details again.

Business Continuity
Network and hardware infrastructure utilises redundancy and diversity whenever possible
– critical production systems are designed to withstand component failure without compromising application availability. All application data disk systems utilise RAID5 or RAID1+0, and all automated failover systems are tested biannually. All client data is backed up to a secure software vault located at a secondary hosting center,
and data is retained for up to a year. Database transaction data is backed up hourly, and system audit logs are kept indefinitely.