Physical and Environmental Access Controls. Splunk limits physical access to its information systems and facilities using physical controls (e.g., coded badge access) that provide reasonable assurance that access to its data centers is limited to authorized individuals and employs camera or video surveillance systems at critical internal and external entry points. Splunk applies air temperature and humidity controls for its data centers and protects against loss due to power failure.
Physical and Environmental Access Controls. Processor limits physical access to its information systems and facilities using physical controls (e.g., coded pass access) that provide reasonable assurance that access to its data centers is limited to authorized individuals and employs camera or video surveillance systems at critical internal and external entry points. Processor applies air temperature and humidity controls for its data centers and protects against loss due to power failure. Logical Access Controls Processor employs logging and monitoring technology to help detect and prevent unauthorized access attempts to its networks and production systems. Processor's monitoring includes a review of changes affecting systems' handling authentication, authorization, and auditing; privileged access to Processor's production systems.
Physical and Environmental Access Controls. Ivanti limits physical access to its information systems and facilities using physical controls (e.g., coded pass access) that provide reasonable assurance that access to its data centers is limited to authorized individuals and employs camera or video surveillance systems at critical internal and external entry points. Ivanti applies air temperature and humidity controls for its data centers and protects against loss due to power failure. Logical Access Controls Ivanti employs logging and monitoring technology to help detect and prevent unauthorized access attempts to its networks and production systems. Ivanti's monitoring includes a review of changes affecting systems' handling authentication, authorization, and auditing; privileged access to Ivanti's production systems. Vulnerability Management Ivanti regularly performs vulnerability scans and addresses detected vulnerabilities in accordance with their risk. Ivanti products are also subject to periodic vulnerability assessment and penetration testing. Disaster Recovery and Back-up Controls Ivanti performs periodic backups of production file systems and databases according to a defined schedule and maintains a formal disaster recovery plan for the production cloud data center, including regular testing. Cyber Incident Response Plan Ivanti employs an incident response plan to manage and minimize the effects of unplanned cyber events that includes procedures to be followed in the event of an actual or potential security breach, including: an internal incident response team with a response leader; an investigation team performing a root causes analysis and identifying affected parties; internal reporting and notification processes; documenting responsive actions and remediation plans; and a post- incident review of events. Storage and Transmission Security Ivanti employs technical security measures to guard against unauthorized access to Ivanti data that is being transmitted over a public electronic communications network or stored electronically.
