Content Matrix 9.7 - Security Guide

SDLC and SDL

The Metalogix® Content Matrix team follows a strict Quality Assurance cycle:

·Access to source control and build systems is protected by domain security, meaning that only employees on Quest’s corporate network have access to these systems. Therefore, should an Metalogix® Content Matrix  developer leave the company, this individual will no longer be able to access Metalogix® Content Matrix systems.

·All code is versioned in source control.

·All product code is reviewed by another developer before check in.

In addition, the Metalogix® Content Matrix Development team follows a managed Security Development Lifecycle (SDL) which includes:

·MS-SDL best practices

·Threat modelling.

·OWASP guidelines.

·Scheduled static code analysis is performed on a regular basis.

·Scheduled vulnerability scanning is performed on a regular basis.

·Development, Pre-Production, and Production environments are segregated. Customer data is not used in Development and Pre-Production environments.

·Metalogix® Content Matrix developers go through the same set of hiring processes and background checks as other Quest employees.

Customer Measures

Metalogix® Content Matrix security features are only one part of a secure environment. Customers should follow their own security best practices when deploying Metalogix® Content Matrix within their environment.
 

About Us

Quest creates software solutions that make the benefits of new technology real in an increasingly complex IT landscape. From database and systems management, to Active Directory and Office 365 management, and cyber security resilience, Quest helps customers solve their next IT challenge now. Around the globe, more than 130,000 companies and 95% of the Fortune 500 count on Quest to deliver proactive management and monitoring for the next enterprise initiative, find the next solution for complex Microsoft challenges and stay ahead of the next threat. Quest Software. Where next meets now. For more information, visit www.quest.com.

Technical Support Resources

Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:

·Submit and manage a Service Request

·View Knowledge Base articles

·Sign up for product notifications

·Download software and technical documentation

·View how-to-videos

·Engage in community discussions

·Chat with support engineers online

·View services to assist you with your product