トラストセンター

We set strict, industry qualified information security policies across all business procedures and strategies.

IFS information security policies form part of our global Information Security Management System (ISMS) which is maintained in accordance with numerous internationally recognized security frameworks including ISO 27001.

How we use detailed, trusted security practices to manage and secure your information.

At IFS we follow industry best practice, taking a risk-based approach, and putting particular emphasis on a range of trusted practices.

Security Operations Center (SOC) 

We invest continually in our platform and network security, co-ordinated by our Security Operations Center (SOC). By using a combination of world-class conventional and Artificial Intelligence based tools and regular penetration testing, we ensure that our business operations are monitored and protected around the clock.

Access control 
Our approach to access control ensures that our users, partners and suppliers have just the necessary level of access required to perform their roles efficiently and effectively.

Single sign-on (SSO) and multi-factor authentication (MFA) are also active across our entire estate. Cryptography is used in transit and at rest to ensure the highest levels of data security whenever information is shared.

Business continuity 
Through thorough business continuity planning, we have established a strong backup and recovery policy which sits at the heart of our disaster recovery plan. We have implemented resilient systems and processes capable of supporting us in the event of a business continuity event at one or more of our operating locations.

Our employees 
We carry out extensive pre-employment checks and rigorous induction training, followed up with an ongoing annual security training program, to help maintain a safe physical and digital working environment. We follow formal employee on- and off-boarding processes to ensure that access to our IT domains are strictly controlled at all times and that information confidentiality is maintained through to post-employment.

We ensure that all third-party suppliers who support the delivery of our services apply the same high standards we set ourselves.

At times it may be necessary for third-parties to access sensitive and confidential information. Whether its information that belongs to IFS or IFS Customers, all third-parties with access are required to follow our information security policies, standards and practices. Our Supplier Management and Partner Management processes ensure that the services and deliverables provided by our third-party eco-system meet the same high standards that we set for ourselves.

We implement industry recognized best practice as part of our cloud service delivery.

By choosing our IFS Cloud service, customers have the advantage of knowing that Cloud security best practices are being implemented for them, including:

• Secure, fully segregated single-tenant architecture to ensure separation between customer environments
• Data encryption both at rest and in transit
• Virus and malware protection
• 24x7x365 Monitoring, Detection and Remediation services using advanced, enterprise grade toolsets operated by experienced practitioners
• Platform-level DDoS detection and protection
• Multi-level backups with geographically separated backup storage and multi-level restoration capability
• Disaster recovery capability to a geographically separate location

We perform regular penetration tests of our services so our IFS Cloud service customers don’t have to.

We engage an independent 3rd party specialist organization to run regular security penetration tests against our Cloud Service in addition to security testing performed earlier in the product lifecycle. These tests cover all software versions current at the time of testing and include all IFS core product modules.

Testing takes place from the internet towards a dedicated, production-grade environment, which is built and maintained using the same architecture, design standards, tooling and processes as all customer environments run by IFS in our cloud.

A formal report is compiled as an output of this testing process, detailing any issues found and assigning an associated risk rating, based on the industry standard CVSSv2 scoring system. Any issues identified are fully analyzed and mitigation and remediation plans produced and implemented. The summary of findings and remediations is available to all IFS Cloud customers upon request.

We offer choice to enable customers to meet their specific requirements.

Customers with data residency requirements can select from a number of supported geographies. This determines the physical location from which the service will be hosted, and by implication the physical location within which their data will be stored and processed.