Lingoport Security Overview - Revision history

Masnes: Product Security - specify review targets rather than review process

2020-12-17T18:58:30Z

Product Security - specify review targets rather than review process

← Older revision		Revision as of 18:58, 17 December 2020
Line 32:		Line 32:

	=== Product level ===		=== Product level ===
	At the product level, Lingoport works to ensure that Lingoport products do not compromise customer security. Products are designed with security standards in mind, and go through a rigorous development cycle. Examples of requirements include that software must support granular and group-based access permissions. That passwords which are stored in databases must be hashed and salted. And that confidential data stays within customer firewalls. During release cycles, product security is ~~tested using vulnerability scanning tools — including Zed Attack Proxy~~ and ~~sqlmap~~.		At the product level, Lingoport works to ensure that Lingoport products do not compromise customer security. Products are designed with security standards in mind, and go through a rigorous development cycle. Examples of requirements include that software must support granular and group-based access permissions. That passwords which are stored in databases must be hashed and salted. And that confidential data stays within customer firewalls. During release cycles, product security is reviewed for OWASP top 10 and SANS top 25 issues.

	== Security and Service Projects ==		== Security and Service Projects ==

Rdaly: /* Overview */

2019-12-09T17:51:52Z

Overview

← Older revision		Revision as of 17:51, 9 December 2019
Line 2:		Line 2:

	Lingoport works to provide customers with a reliable service that safeguards private information. We implement various security-centric policies in support of these principles. Lingoport’s security standards have been built to support the security conscious, including customers in industries such as Human Resources, Finance, and Medical Systems.		Lingoport works to provide customers with a reliable service that safeguards private information. We implement various security-centric policies in support of these principles. Lingoport’s security standards have been built to support the security conscious, including customers in industries such as Human Resources, Finance, and Medical Systems.

	~~=== In Summary ===~~

	* We protect our organization, and our customers, by addressing [[#Key Security Principles\|Key Security Principles]]
	* We consider security [[#Security Throughout Lingoport\|Throughout Our Organization]].
	* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].
	* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].

	== Key Security Principles ==		== Key Security Principles ==

Olibouban: /* Security and Cloud Offerings */

2019-06-03T21:38:04Z

Security and Cloud Offerings

← Older revision		Revision as of 21:38, 3 June 2019
Line 69:		Line 69:
	== Security and Cloud Offerings ==		== Security and Cloud Offerings ==

	Lingoport Cloud-Offered servers are hosted on AWS, with all the associated security guarantees. We benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. More on AWS cloud security can be found here: https://aws.amazon.com/security/. See also an illustration of the layers of [ AWS Security \| AWS Security ].		Lingoport Cloud-Offered servers are hosted on AWS, with all the associated security guarantees. We benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. More on AWS cloud security can be found here: https://aws.amazon.com/security/. See also an illustration of the layers of [[ AWS Security \| AWS Security ]].

	In addition to benefiting from AWS's security infrastructure, Lingoport takes the following steps to ensure Cloud Servers are managed securely:		In addition to benefiting from AWS's security infrastructure, Lingoport takes the following steps to ensure Cloud Servers are managed securely:

Olibouban: /* Security and Cloud Offerings */

2019-06-03T21:37:46Z

Security and Cloud Offerings

← Older revision		Revision as of 21:37, 3 June 2019
Line 69:		Line 69:
	== Security and Cloud Offerings ==		== Security and Cloud Offerings ==

	Lingoport Cloud-Offered servers are hosted on AWS, with all the associated security guarantees. We benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. More on AWS cloud security can be found here: https://aws.amazon.com/security/		Lingoport Cloud-Offered servers are hosted on AWS, with all the associated security guarantees. We benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. More on AWS cloud security can be found here: https://aws.amazon.com/security/. See also an illustration of the layers of [ AWS Security \| AWS Security ].

	In addition to benefiting from AWS's security infrastructure, Lingoport takes the following steps to ensure Cloud Servers are managed securely:		In addition to benefiting from AWS's security infrastructure, Lingoport takes the following steps to ensure Cloud Servers are managed securely:

Masnes at 18:29, 27 June 2018

2018-06-27T18:29:50Z

← Older revision		Revision as of 18:29, 27 June 2018
Line 66:		Line 66:

	An example of a security requirement is that all passwords stored in a database must be hashed and salted. Lingoport’s Globalyzer uses the bcrypt algorithm for password hashing.		An example of a security requirement is that all passwords stored in a database must be hashed and salted. Lingoport’s Globalyzer uses the bcrypt algorithm for password hashing.

			== Security and Cloud Offerings ==

			Lingoport Cloud-Offered servers are hosted on AWS, with all the associated security guarantees. We benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. More on AWS cloud security can be found here: https://aws.amazon.com/security/

			In addition to benefiting from AWS's security infrastructure, Lingoport takes the following steps to ensure Cloud Servers are managed securely:

			* Granular permissions are required to connect to instances. Only authorized employees are enabled to connect to each instance. All connections require private-key based authentication, using individually assigned employee private keys.
			* Per-instance security groups with connections limited to Lingoport and Customer-provided whitelist.
			* All connections encrypted in transit with TLS

Masnes: /* Key Security Principles */

2017-10-31T18:26:31Z

Key Security Principles

← Older revision		Revision as of 18:26, 31 October 2017
Line 16:		Line 16:
	=== Confidentiality — Sensitive information only accessible by authorized parties ===		=== Confidentiality — Sensitive information only accessible by authorized parties ===

	Lingoport considers confidentiality at the organizational level, and throughout development processes. Lingoport is especially considerate of sensitive intellectual property, working hard to ensure that it is not accessible by non-authorized		Lingoport considers confidentiality at the organizational level, and throughout development processes. Lingoport is especially considerate of sensitive intellectual property, working hard to ensure that it is not accessible by non-authorized personnel.

	=== Availability — Products and services useable when needed ===		=== Availability — Products and services useable when needed ===

Masnes: /* Key Security Principles */

2017-10-31T18:26:17Z

Key Security Principles

← Older revision		Revision as of 18:26, 31 October 2017
Line 13:		Line 13:

	Confidentiality, Availability, and Integrity are the core principles of information security. Lingoport works to address each one with care and diligence.		Confidentiality, Availability, and Integrity are the core principles of information security. Lingoport works to address each one with care and diligence.

			=== Confidentiality — Sensitive information only accessible by authorized parties ===

			Lingoport considers confidentiality at the organizational level, and throughout development processes. Lingoport is especially considerate of sensitive intellectual property, working hard to ensure that it is not accessible by non-authorized

	=== Availability — Products and services useable when needed ===		=== Availability — Products and services useable when needed ===
Line 21:		Line 25:

	Lingoport guarantees the integrity of its data through following IT best practices and maintaining simplicity where possible. Server backups are taken at least daily. For critical infrastructure, backups are stored at multiple locations — in case of a data center failure. Restore processes are tested.		Lingoport guarantees the integrity of its data through following IT best practices and maintaining simplicity where possible. Server backups are taken at least daily. For critical infrastructure, backups are stored at multiple locations — in case of a data center failure. Restore processes are tested.

	~~=== Confidentiality — Sensitive information only accessible by authorized parties ===~~

	Lingoport considers confidentiality at the organizational level, and throughout development processes. Lingoport is especially considerate of sensitive intellectual property, working hard to ensure that it is not accessible by non-authorized

	== Security Throughout Lingoport ==		== Security Throughout Lingoport ==

Masnes: /* In Summary */

2017-10-31T18:25:57Z

In Summary

← Older revision		Revision as of 18:25, 31 October 2017
Line 5:		Line 5:
	=== In Summary ===		=== In Summary ===

	* We protect our organization, and our customers, by addressing ~~the three key security principles:~~ [[#~~Confidentiality, Availability, and Integrity~~\|~~Confidentiality, Availability, and Integrity~~]]		* We protect our organization, and our customers, by addressing [[#Key Security Principles\|Key Security Principles]]
	* We consider security [[#Security Throughout Lingoport\|Throughout Our Organization]].		* We consider security [[#Security Throughout Lingoport\|Throughout Our Organization]].
	* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].		* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].

Masnes: /* Confidentiality, Availability, and Integrity */

2017-10-31T18:25:27Z

Confidentiality, Availability, and Integrity

← Older revision		Revision as of 18:25, 31 October 2017
Line 10:		Line 10:
	* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].		* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].

	== ~~Confidentiality, Availability, and Integrity~~ ==		== Key Security Principles ==

	Confidentiality, Availability, and Integrity are the core principles of information security. Lingoport works to address each one with care and diligence.		Confidentiality, Availability, and Integrity are the core principles of information security. Lingoport works to address each one with care and diligence.
Line 24:		Line 24:
	=== Confidentiality — Sensitive information only accessible by authorized parties ===		=== Confidentiality — Sensitive information only accessible by authorized parties ===

	Lingoport considers confidentiality at the organizational level, and throughout development processes. Lingoport is especially considerate of sensitive intellectual property, working hard to ensure that it is not accessible by non-authorized		Lingoport considers confidentiality at the organizational level, and throughout development processes. Lingoport is especially considerate of sensitive intellectual property, working hard to ensure that it is not accessible by non-authorized

	== Security Throughout Lingoport ==		== Security Throughout Lingoport ==

Masnes: /* Overview */

2017-10-31T18:22:34Z

Overview

← Older revision		Revision as of 18:22, 31 October 2017
Line 6:		Line 6:

	* We protect our organization, and our customers, by addressing the three key security principles: [[#Confidentiality, Availability, and Integrity\|Confidentiality, Availability, and Integrity]]		* We protect our organization, and our customers, by addressing the three key security principles: [[#Confidentiality, Availability, and Integrity\|Confidentiality, Availability, and Integrity]]
	* We consider security [#Security Throughout Lingoport\|Throughout Our Organization]].		* We consider security [[#Security Throughout Lingoport\|Throughout Our Organization]].
	* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].		* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].
	* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].		* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].

← Older revision		Revision as of 18:22, 31 October 2017
Line 6:		Line 6:

	* We protect our organization, and our customers, by addressing the three key security principles: [[#Confidentiality, Availability, and Integrity\|Confidentiality, Availability, and Integrity]]		* We protect our organization, and our customers, by addressing the three key security principles: [[#Confidentiality, Availability, and Integrity\|Confidentiality, Availability, and Integrity]]
	* We consider security [#Security Throughout Lingoport\|Throughout Our Organization]].		* We consider security [[#Security Throughout Lingoport\|Throughout Our Organization]].
	* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].		* We take customer security very seriously during [[#Security and Service Projects\|Service Projects]].
	* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].		* We minimize security exposure to our customers through [[#Security and the Development Process\|Security Conscious Product Design]].