Does the solution require QOS?
|
|
1
|
26
|
30 July 2021
|
Does the solution require special IPS/IDS exceptions?
|
|
1
|
83
|
30 July 2021
|
Is a remote desktop connection (e.g. Webex), a thin-client (Citrix) or direct access required?
|
|
1
|
48
|
30 July 2021
|
Will remote access to the system be required?
|
|
1
|
40
|
30 July 2021
|
What is the private subnet where the solution is hosted e.g. 10.0.0.0
|
|
1
|
50
|
30 July 2021
|
Is there any additional encryption key use. i.e. SSL /TLS?
|
|
1
|
38
|
30 July 2021
|
How are communications between endpoints secured? VPN, TLS
|
|
1
|
31
|
30 July 2021
|
Does the solution require access to the customers Internal Network?
|
|
1
|
31
|
30 July 2021
|
Does the solution require access to the customers DMZ?
|
|
1
|
39
|
30 July 2021
|
Does the solution require PSN/N3/PNN/ESN Access?
|
|
1
|
52
|
30 July 2021
|
Does the solution require Internet access?
|
|
1
|
52
|
30 July 2021
|
Is data storage used in Alloy audited?
|
|
1
|
62
|
30 July 2021
|
Do you provide statements/certificates to demonstrate media destruction?
|
|
1
|
49
|
30 July 2021
|
Do you have a Media Destruction policy?
|
|
1
|
47
|
30 July 2021
|
Is the solution backed up to tape or other physical media?
|
|
1
|
33
|
30 July 2021
|
What data do you retain at the end of a contract?
|
|
1
|
36
|
30 July 2021
|
Is TLS opportunistic or enforced on your mail gateway?
|
|
1
|
52
|
30 July 2021
|
How is the data stored at Rest? If it is encrypted, please specify?
|
|
1
|
41
|
30 July 2021
|
Do you outsource the Data Centre element of the solution to a 3rd party?
|
|
1
|
36
|
30 July 2021
|
How do we organise a pen test against Alloy? (Penetrations Test)
|
|
1
|
43
|
30 July 2021
|
Is TLS enforced for all API calls?
|
|
1
|
29
|
30 July 2021
|
How are potential new threats, vulnerabilities or exploitation techniques assessed?
|
|
1
|
42
|
30 July 2021
|
Can I whitelist emails from Alloy?
|
|
1
|
46
|
28 July 2021
|