Securing the infrastructure, network, and hosting environment using best practices is a vital part of Cartika's ongoing security policy of providing a secure platform for your business or organization.

DATACENTERS & PHYSICAL ACCESS SECURITY

• Full CCT surveillance is in use, backed by digital recording on file, along with intrusion detection systems to prevent unauthorized electronic access
• Each datacenter offers onsite staff 24x7 - providing additional protection against unauthorized entry
• Locking cages/cabinets, and DC retains all keys (verified check in/check out)
• SAS-70 audited data center infrastructure

OPERATION SECURITY AND NETWORK ACCESS

• Senior management team creates security policies, which are continually modified and reviewed
• Security team tasked with oversight of the security programs
• Security Program is in place, with documented security policies, standards and procedures
• Staff are required to sign confidentiality agreements
• Security policies and procedures are disseminated to all staff
• All staff are instructed how to detect and/or respond to security incidents or technical malfunctions
• Documented policies and procedures for system administration and network management
• Documented policies regarding the secure disposal of media/data
• Formal patch management, notification, approval, and rollback systems are in place for production changes
• Each staff member has unique passwords and authentication parameters to our infrastructure through VPN access
• Each staff member has unique passwords and authentication parameters to our infrastructure through AD/LDAP systems
• Staff cannot change their own encrypted passwords for network access
• Network and physical alerts are generated by our systems
• Change controls/procedures are fully documented internally

INTRUSION PROTECTION AND PATCHING

• Hardware Firewalls at core levels
• Software firewalls in each managed environment
• Commercial, third party, and proprietary anti-virus and malware w/scans performed daily and notifications ticketed
• Server patching through commercial automated solutions and proprietary systems