|
About the Infrastructure category
|
|
0
|
99
|
28 July 2021
|
|
Do you automate integration and deployment pipelines and how do you enforce security, consistency and auditing?
|
|
1
|
145
|
10 August 2023
|
|
Is Alloy continually monitored?
|
|
1
|
149
|
30 July 2021
|
|
Are Alloy backups immutable? Are they fixed or can they be changed?
|
|
1
|
179
|
6 August 2021
|
|
Does audit data such as verbose logs contain any sensitive information?
|
|
1
|
153
|
30 July 2021
|
|
Can the log files of your solution/system be exported?
|
|
1
|
146
|
30 July 2021
|
|
Do you have a process for actual or suspected cyber security incidents or breaches being reported to the customer?
|
|
1
|
92
|
30 July 2021
|
|
If you use AWS, do you use Amazon GuardDuty Threat Detection?
|
|
1
|
110
|
30 July 2021
|
|
If you use AWS, do you use Amazon Shield?
|
|
1
|
98
|
30 July 2021
|
|
Where is the data held in the cloud? UK, EEC or Outside of the EEC?
|
|
1
|
119
|
30 July 2021
|
|
Is there any Data Pinning in place?
|
|
1
|
183
|
30 July 2021
|
|
How is the data protected in transit?
|
|
1
|
145
|
30 July 2021
|
|
Do you wish to send email from Alloy using our domain or smtp server?
|
|
1
|
135
|
30 July 2021
|
|
Have you implemented DKIM, DMARC and SPF on your email service?
|
|
1
|
148
|
30 July 2021
|
|
What is your backup schedule?
|
|
1
|
162
|
30 July 2021
|
|
Do you use tapes as your backup solution?
|
|
1
|
147
|
30 July 2021
|
|
Does the solution use online replication between sites/datacentres?
|
|
1
|
148
|
30 July 2021
|
|
Where is Alloy Data Stored?
|
|
1
|
212
|
30 July 2021
|
|
Will remote access be required?
|
|
1
|
181
|
30 July 2021
|
|
Is Site to Site VPN required?
|
|
1
|
166
|
30 July 2021
|
|
Which Certification Authority do you use?
|
|
1
|
143
|
30 July 2021
|
|
Does the solution use Client Certificates for authentication or S/MIME?
|
|
1
|
130
|
30 July 2021
|
|
Does the solution use Client Certificates for signing to provide non-repudiation?
|
|
1
|
123
|
30 July 2021
|
|
Are Self Signed Digital Certificates used?
|
|
1
|
161
|
30 July 2021
|
|
Are there real-time alerts?
|
|
1
|
136
|
30 July 2021
|
|
How is the communication between the Client/Mobile and the Service encrypted?
|
|
1
|
138
|
30 July 2021
|
|
Can direct access to the database be made available?
|
|
1
|
170
|
30 July 2021
|
|
Does the solution require an EV certificate?
|
|
1
|
138
|
30 July 2021
|
|
Are any Trusted Root Certificates included in the standard build
|
|
1
|
105
|
30 July 2021
|
|
Can you limit user access to Alloy to specific IP ranges
|
|
1
|
181
|
30 July 2021
|