Nova Current - Reporting Security Guide

Converse agora com nosso suporte

Obtenha ajuda em tempo real
Concluir registro

Entrar

Solicitar preços

Entre em contato com o setor de vendas

Introduction About Nova Reporting Architecture overview AWS and Azure datacenter security Overview of data handled by Nova Reporting Admin Consent and Service Principals Location of customer data Privacy and protection of customer data Separation of customer data Network communications Authentication of users Role based access control FIPS 140-2 compliance SDLC and SDL Operational security

Access to data Operational monitoring Production Incident Response Management

Customer measures Technical support resources

Introduction

Managing information system security is a priority for every organization. In fact, the level of security provided by software vendors has become a differentiating factor for IT purchase decisions. Quest strives to meet standards designed to provide its customers with their desired level of security as it relates to privacy, confidentiality, integrity and availability.

This document describes the security features of Nova Reporting. This includes access control, protection of customer data, secure network communication, and cryptographic standards.

About Nova Reporting

Nova Reporting provides more than 100 customizable Office 365 reports and dashboards, which can help you to make fast decisions and manage your licenses, user adoption, mail flow, security settings, permissions, storage optimization and much more.

Key features:

·Drill-down based on Microsoft Entra attributes

·Correlate data from Teams, SharePoint Online, Exchange Online, Yammer and the native audit log

·Visualize data with charts, heat maps and more

·Export, schedule and share insights across your entire organization in a secure and controlled manner

·Share free/busy information between tenants.

Nova Reporting is hosted in Amazon Web Services and delivers most of its functions via Amazon Web Services cloud services.

Architecture overview

The following diagram shows the key components of the Nova Reporting configuration.

Architecture4

AWS and Azure datacenter security

Microsoft Azure datacenters have the highest possible physical security and are considered among the most secure and well protected datacenters in the world. They are subject to regular audits and certifications including Service Organization Controls (SOC) 1, SOC 2 and ISO/IEC 27001:2005.

Relevant references with additional information about the Windows Azure datacenter security can be found here:

·Microsoft Azure Trust Center: https://azure.microsoft.com/en-us/overview/trusted-cloud/

·Microsoft Trust Center Compliance: https://www.microsoft.com/en-us/trust-center/compliance/compliance-overview?service=Azure#Icons

·Microsofts submission to the Cloud Security Alliance STAR registry: https://cloudsecurityalliance.org/star/registry/microsoft

·Whitepaper: Standard Response to Request for Information Security and Privacy: http://www.microsoft.com/en-us/download/details.aspx?id=26647

·Microsoft Global Datacenters: Security & Compliance: https://www.microsoft.com/en-us/cloud-platform/global-datacenters

·Azure data security and encryption best practices: https://docs.microsoft.com/en-us/azure/security/fundamentals/data-encryption-best-practices

Amazon Web Services (AWS) datacenters have the highest possible physical security and are considered among the most secure and well protected datacenters in the world. They are subject to regular audits and certifications including SOC 1, SOC 2 and ISO/IEC 27001:2005.

Relevant references with additional information about the AWS datacenter security are listed below.

·AWS Security Center: https://aws.amazon.com/security/

·AWS Compliance: https://aws.amazon.com/compliance/

·AWS Global Infrastructure: https://aws.amazon.com/about-aws/global-infrastructure/