Enterprise Security Assessment > Risk and Security Management > Threat Management

Are Windows servers used as part of the Scoped Services?

book reader icon
1 Minute
11/14/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes, Windows servers are employed as part of our Scoped Services and meet all relevant security and compliance criteria. Our servers are hosted by a ISO 27001-certified third-party infrastructure provider, are hardened according to current standards, monitored, secured and encrypted.

Last update 4 days ago

Are Servers used for transmitting, processing or storing Scoped Data?

Yes, we employ servers which transmit, process and store Scoped Data and which meet all relevant security and compliance criteria according to current standards

Are server security configuration standards documented and based on external industry or vendor guidance?

Our server security configuration standards use established frameworks, are documented and based on vendor recommendations and common industry standards.

Are server security configuration reviews performed regularly to validate compliance with documented standards?

Yes. Server security configurations are regularly reviewed and updated when necessary to fully ensure compliance with all documented security standards.

Are all servers configured according to security standards as part of the build process?

Our servers are configured in accordance with all common security standards and are regularly patched and updated. Security standards are documented.

Are all unnecessary/unused services uninstalled or disabled on all servers?

Yes. The necessity of all services on our servers is evaluated regularly and all services deemed unnecessary are shut down.