Firewalls and antivirus. All the Supplier’s computers have Antivirus installed to protect against virus, phishing etc. All on-prem servers are hosted in a professional datacenter behind firewall and can only be accessed via MFA controlled VPN or from inside our corporate network. All cloud-based infrastructure, i.e. the Supplier’s Microsoft Azure tenant, are only accessible with MFA authentication integrated with our corporate authentication setup. The Supplier’s office network is based on Cisco Meraki technology and Wifi is same and integrated with corporate authentication Microsoft Azure Active Directly.
Firewalls and antivirus xxx.xxxxx networks have been segmented in order to keep data separate. This is handled by the Operations Department of xxx.xxxxx. All networks have been segmented in such a way that client use is separated from internal use. The networks for internal use are furthermore segmented into more networks to avoid security incidents, if a service is down. This is handled by the Operations Department, and xxx.xxxxx CTO is responsible for compliance with xxx.xxxxx security policy. Authorised members of staff have remote access to xxx.xxxxx systems. Access to xxx.xxxxx systems is only possible through either MAC address limited networks or through xxx.xxxxx SSL VPN. A guest network has been established for externals visiting our offices. Due to malware having significant impact on the availability of systems and services, xxx.xxxxx has set up efficient malware protection. Every xxx.xxxxx server has antivirus protection. Only select members of staff with admin ac- cess can remove that software from the systems. All incoming email traffic is scanned for malicious content which is then removed. According to xxx.xxxxx SLA (service level agree- ment), customer data requires full protection on servers rented by xxx.xxxxx. We have implemented scan and surveillance systems to safeguard us from known and mali- cious code, i.a. anything we and our customers may pick up from the internet or via emails etc. We have antivirus systems as well as systems for monitoring use of the internet, traffic and resources on the SaaS platforms, as well as security warning in other technical and cen- tral installations (firewall etc.)
