1 What technologies and version control systems does Factech use?<\/a><\/p>\n 2 What type of database does Factech use?<\/a><\/p>\n 3 How are bugs tracked and resolved?<\/a><\/p>\n 4 Does Factech provide API access, If yes is there any conditions to use it?<\/a><\/p>\n 5 Which programming language is the system built on?<\/a><\/p>\n 6 What is the system and server downtime?<\/a><\/p>\n 7 What security measures are in place?<\/a><\/p>\n 8 How resource-intensive is the system on PCs, laptops, and mobile devices?<\/a><\/p>\n 9 What are the minimum phone Android\/iOS versions required to run the Factech app<\/a><\/p>\n 10 How many servers does Factech operate?<\/a><\/p>\n 11 What certifications does the system hold, and how is data privacy ensured?<\/a><\/p>\n 12 How scalable is the product for high traffic or data load?<\/a><\/p>\n 13 How are security incidents and breaches handled?<\/a><\/p>\n 14 Is there an incident response and recovery plan?<\/a><\/p>\n 15 Is our data backed up regularly?<\/a><\/p>\n 16 What happens to our data if we stop using the service?<\/a><\/p>\n 17 How do you manage system updates and version control?<\/a><\/p>\n 18 How secure are your API endpoints?<\/a><\/p>\n 19 Can we choose the data center location (for compliance reasons)<\/a><\/p>\n 20 How do you handle disaster recovery and failover?<\/a><\/p>\n ————————————–<\/p>\n 1. Are all network settings and configurations kept secure and regularly updated?<\/strong><\/p>\n Yes.<\/p>\n 2. Is access to your cloud infrastructure limited only to the people who are directly managing or maintaining our systems?<\/strong><\/p>\n Yes.<\/p>\n 3. Do you have protections in place against threats like phishing, viruses, and hacking?<\/strong><\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes<\/p>\n 1. Do users only have access to the systems or data they need to do their job \u2014 and nothing more?<\/strong><\/p>\n Yes.<\/p>\n 2. Is there a system in place to make sure our data isn’t accidentally shared with other companies or customers on the cloud?<\/strong><\/p>\n Yes.<\/p>\n 3. Are responsibilities and access separated so that no single person has full control over critical functions?<\/strong><\/p>\n Yes.<\/p>\n 1. Is access by users with special permissions (privileged users) being tracked and monitored?<\/strong><\/p>\n Yes.<\/p>\n 2. Are regular checks done to review who has access to cloud systems and whether their access is still needed?<\/strong><\/p>\n Yes.<\/p>\n 3. Are changes to user permissions or system settings being logged and reviewed?<\/strong><\/p>\n Yes<\/p>\n 1. Are strong password rules followed on all cloud systems, similar to CCIL\u2019s standards?<\/strong><\/p>\n Yes.<\/p>\n 2. Is multi-factor authentication (like OTPs or authentication apps) required for users who access cloud systems?<\/strong><\/p>\n Yes.<\/p>\n 3. Are users automatically logged out if they are inactive for a certain amount of time?<\/strong><\/p>\n Yes.<\/p>\n 1. Is data on the cloud regularly backed up according to a set schedule?<\/strong><\/p>\n Yes.<\/p>\n 2. Are old or unneeded copies of data stored in different locations properly deleted when they are no longer needed or when requested by CCIL?<\/strong><\/p>\n Yes.<\/p>\n 3. Is there a clear plan for how long data should be kept and when it should be destroyed?<\/strong><\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n Yes.<\/p>\n For anyone with privileged access (our staff\/admins): Yes\u2014EDR\/anti-malware is mandatory and enforced. <\/p>\n ——————-<\/p>\n","protected":false},"excerpt":{"rendered":" General Questions 1 What technologies and version control systems does Factech use? 2 What type of database does Factech use? 3 How are bugs tracked and resolved? 4 Does Factech provide API access, If yes is there any conditions to use it? 5 Which programming language is the system built on? 6 What is the<\/p>\n","protected":false},"author":4,"featured_media":4171,"parent":0,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"folder":[],"class_list":["post-10536","page","type-page","status-publish","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\tWhat SaaS Cloud based Security measures are taken care of? <\/a><\/h2>\n
Cloud Network Security<\/h1>\n
Security & Access Control<\/h2>\n
Monitoring & Protection<\/h2>\n
4. Do you keep records (logs) of system activity so that any suspicious or unauthorized behavior can be detected?<\/strong><\/p>\n
5. Have you set up alerts to warn if there\u2019s any potential threat or unusual activity in our cloud systems?<\/strong><\/p>\n
6. Do you use tools to constantly watch over and analyze the network traffic and activity in your cloud system?<\/strong><\/p>\nData Protection<\/h2>\n
7. Is the data that\u2019s sent between your cloud services and our users protected with secure communication methods like TLS or SSL?<\/strong><\/p>\n
8. Do you use encryption to protect sensitive information while it\u2019s being sent over the internet?<\/strong><\/p>\nDDoS Attack Prevention<\/h2>\n
9. Do you have any protections in place to stop or reduce the impact of Distributed Denial of Service (DDoS) attacks that could try to overwhelm the system?<\/strong><\/p>\nAccess Control & User Management<\/h1>\n
User Permissions & Access Control<\/h2>\n
Monitoring & Reviews<\/h2>\n
Security Measures<\/h2>\n
Cloud Data Security<\/h1>\n
Data Backup & Retention<\/h2>\n
Data Protection & Risk Management<\/h2>\n
4. Is any sensitive or critical data assessed for risk before storing it in the cloud?<\/strong><\/p>\n
5. Are there controls in place to protect against accidental data leaks or breaches?<\/strong><\/p>\n
6. Is all data both stored (at rest) and being transferred (in transit) encrypted, depending on its importance or type?<\/strong><\/p>\nOperational Security<\/h2>\n
7. Does the cloud service provider have processes for managing changes, keeping systems running smoothly, and protecting against viruses or malware?<\/strong><\/p>\n
8. Is logging and monitoring of activities on cloud systems being done regularly?<\/strong><\/p>\n
9. Do cloud systems include features like backup and capacity management to handle increased demand or issues?<\/strong><\/p>\nEnd-User Security<\/h2>\n
10. Are users required to have antivirus or anti-malware software installed on their devices before they connect to cloud systems?<\/strong><\/p>\n
For regular end-users of the SaaS via browser: Not required by default, but strongly recommended;<\/p>\n