Encryption of Backups Clause Samples

Encryption of Backups. Backups of Customer Data are encrypted and stored in a secondary data center. Physical Security Security Safeguards. Physical security safeguards are maintained at any facilities where iManage hosts Customer Data or Personal Data. Physical access to such facilities is only granted following a formal authorization procedure and access rights are reviewed periodically. Facilities. Such facilities are rated as Tier 3 data centers or greater, and access to such facilities must be limited to identified and authorized individuals. Such facilities use a variety of industry standard systems to protect against loss of Customer Data and Personal Data due to power supply failure, fire, and other natural hazards. Event Logging Network Security. iManage utilizes an enterprise-class security information and event management (SIEM) system and maintains firewalls and other control measures (e.g., security appliances, network segmentation) to provide reasonable assurance that access from and to its networks is appropriately controlled. Event Logging. iManage logs access and use of information systems containing Customer Data. System Configuration Malicious Software. Anti-malware controls are maintained to help prevent malicious software from causing accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data. Asset Inventory. Asset inventories of computing equipment and media used in connection with the processing of Customer Data are maintained. Access to such inventories is restricted to authorized iManage Personnel. Governance and Management Information Security Management. • iManage has appointed one or more security officers responsible for coordinating and monitoring the security rules and procedures. • iManage maintains an information security program designed to protect Customer Data and Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. iManage Personnel. iManage maintains written policies and procedures that address the roles and responsibilities of iManage Personnel, including both technical and non-technical personnel, who have access to Customer Data and Personal Data in connection with providing the Services. Data Management. iManage maintains commercially reasonable controls for information governance and data management in connection with the Cloud Services. Certification of Processes Standards. iManage adheres, and at all times will adhere, to info...