On Demand Migration cryptographic usage is based on Azure FIPS 140-2 compliant cryptographic functions. For more information, see: https://docs.microsoft.com/en-us/azure/storage/blobs/security-recommendations
The On Demand team follows a strict Quality Assurance cycle.
In addition, the On Demand Development team follows a managed Security Development Lifecycle (SDL) which includes:
On Demand developers go through the same set of hiring processes and background checks as other Quest employees.
On Demand has undergone a third party security assessment and penetration testing yearly since 2017. The assessment includes but is not limited to:
A summary of the results is available upon request.
On Demand is included in the scope of the Platform Management ISO/IEC 27001, 27017 and 27018 certification:
Quest Software, Inc. has successfully completed a SOC 2 examination of its On Demand solution. The examination was performed by an independent CPA firm for the scope of service described below:
Examination Scope: Quest On Demand Platform
Selected SOC 2 Categories: Security
Examination Type: Type 2
Review Period: January 1, 2022, to July 31, 2022
Service Auditor: Schellman & Company, LLC
Source control and build systems can only be accessed by Quest employees on Quest’s corporate network (domain security.) If a developer (or any other employee with access to On Demand Migration) leaves the company, the individual immediately loses access to the systems.
All code is versioned in source control.
Access to On Demand Migration data is restricted to:
Access to On Demand Migration data is restricted through the dedicated Quest Azure AD security groups. For different types of data (e.g., product logs, customer data, and sensitive data) different access levels and lists of allowed people are assigned.
Quest Operations team members have access to the Quest’s production Azure Subscription and monitor this as part of normal day to day operations. On Demand Migration developers have no access to Quest’s production Azure Subscription.
To access On Demand Migration, a customer representative opens the On Demand website and signs up for an On Demand account. The account is verified via email; thus a valid email address must be provided during registration.
An organization is automatically created once the new account is created.
Azure Active Directory Global Administrator must give the Admin Consent to provision On Demand Migration for the customer's Azure Active Directory with the following permissions:
OAuth 2.0 Permission Grants
Microsoft SharePoint Online
Microsoft Graph permissions reference - Microsoft Graph | Microsoft Docs
On Demand Migration internal logging is available to Quest Operations and On Demand Migration development teams during the normal operation of the platform.
The recorded information includes date and time, actor, a description and customized fields of the event but no details about the content of the data migrated (emails title/body, attachments, SharePoint/Teams files/Channels content).
The On Demand solution leverages Azure App Insight to collect all environment and application specific logs, auditing of user activities, system, and system administration activities. The logs are encrypted at rest starting in Application Insight and Azure tables then written to WORM storage within Azure to prevent tampering.
A customer only log is used when an error occurs which contains the Title of the object migrated (e.g. mail item subject, OneDrive file names, error messages reporting user names or email addresses, etc.). This information is only visible to customers and can be used to ease Customer Support Request troubleshooting. This feature is optional and can be turned off completely by the customer but as a consequence only GUID/ID will be available to determine which migrated data faced the error and can thus make troubleshooting much harder.
Quest Operations and Quest Support have procedures in place to monitor the health of the system and ensure any degradation of the service is promptly identified and resolved. On Demand Migration relies an Azure infrastructure and as such, is subject to the possible disruption of these services.
© ALL RIGHTS RESERVED. Feedback 使用条款 隐私 Cookie Preference Center