Orange County NC Website
FASTER: VbWest has a process by which an annual review of p011clus are settled bV extemal <br />auditors for ratifications. Relevant follow to Customers are cam Irradiated In writing when <br />appropriate. <br />25. What by the bases architecture of the cloutlproWder's networksemdtyi coverall design, zones, <br />filters, 8rewells, VLANS, prospects, standards) <br />FASTER: Environments In FASTER's cloud envimnment are physically one bglmlly segregated <br />wlMprewnlls and Miss. Rath Internal and exreratel plans ore regularly conducted us prescribed <br />by Industry best pmcnres andgumance. Than parties are contracted to conduct monerobviry <br />scans andcerlMn penetration tests an the retworks and Infrastructure. AnfFmolware sujtware <br />Is empbyedan all systems commonly offecfed by ministers. The envionmenf mummies <br />unlfliardonsfer PCI OSS, SSAEI6, ISAE 3902, SOC2/3 and Safe Forever <br />26. What greatly measures does the cloud provider use In data storage, transit and use? <br />FAS?ER: industry standard SSL is used to protect data In transit while robust network security <br />coition such as appellation traffic Homage, Rrewalls and network segmentation techniques <br />are used to secure against malware attacks or pruSlom. <br />27. What encryption techimaties does the cloud prevent use in data management? <br />FASTER: All backaffke systems am Interstate by industry standard SSL(Secure SO[ke6 LOyed <br />Utilizing an Slit allows documents and other Information to be sent securely over the Interval <br />using on encryption protocol <br />28. How are access rights managed by the cloud provider far their employees, contractors and other <br />Panels? <br />FASTER: fie losing Provides, has oformal request and appromlpmredumfor granting <br />employees access to systems. Access to client systems is only erupted if the snQmember'spb <br />responsibilities regvbe such attest. <br />29. What methods does the cloud prouder use to destroy Information, when s0 authorized? <br />FASTER: The Cloud Wovder supports summer deletion such as degaussing and cryptogmphn <br />Wlplrg of data. Additionally, the provider has established procedures to al lee all computing <br />resources of mount auto once a customer has wmktl on environment. <br />M. What Is the cloud powder's patch management policyfinethadd? <br />FASTER: VloWesYS change management processes are documented In thelrSOC1(SSAE 161 <br />Independent auditor's report. <br />31. How does the cloud provider defend against mahvare, Including but not limited to vlmsey bats, <br />FAM GR a, Response to 5243 for Orange County, NC I Page 97 <br />