SECURITY

The infrastructure is protected by extensive network and security monitoring systems. These systems provide important security measures, such as basic distributed denial of service (DDoS) protection and password brute-force detection. In addition, infrastructure components are continuously scanned and tested. While some organisations perform vulnerability scanning on their resources once a quarter or once a month, the infrastructure is scanned multiple times a day and from every possible angle.

The production network is segregated from the corporate network and requires a separate set of credentials for access, consisting of SSH public-key authentication through a bastion host using an MFA token. This access is monitored and reviewed on a daily basis by security managers.

In addition to a large staff of security experts, a large set of tools and systems are used to automate many of the security tasks, both large and small. Everything from managing credentials to monitoring server and network usage, port scanning activities, application usage, and unauthorised intrusion attempts.

The automated tools enforce important security principles like least privilege and role segregation programmatically. Custom metrics thresholds for unusual activity can be set and automatically alert the appropriate security experts or take the appropriate actions.

The infrastructure is compliant with an extensive list of global security standards, including ISO 27001, SOC, the PCI Data Security Standard, the Australian Signals Directorate (ASD) Information Security Manual, and the Singapore Multi-Tier Cloud Security Standard (MTCS SS 584).

Independent auditors verify that specific security controls are in place and operating as intended.

The infrastructure is located across multiple geographic regions and zones within each region. This means that infrastructure is physically separated and is located in different risk areas. Each location is fed via different grids from independent utilities to further reduce single points of failure.

In the unlikely case of failure, automated processes move data traffic away from the affected area. Core applications are deployed in an N+1 configuration, so that in the event of a data center failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites.