Data Security, Compliance, and Business Continuity

Application Security and Encryption

Teams across our company are responsible for staying current on innovations and trends in school technology and data security. They help us maintain multiple security certifications from organizations like the Computing Technology Industry Association (CompTIA), Disaster Recovery Institute (DRI) International, Information Systems Audit and Control Association (ISACA), International Information System Security Certification Consortium (ISC2), the ITIL Foundation, and the Payment Card Industry (PCI) Security Standards Council.

Cybersecurity

Our data network infrastructure has a number of security measures in place to predict issues, protect the information, and keep your school compliant. Intrusion detection and prevention systems (IDS/IPS) monitor all inbound/outbound activity and help protect against denial-of-service (DoS) attacks. We also perform regular external and internal scans of our network and network devices to look for issues, updates, or changes to the configuration.

Testing and Threat Assessment

We follow strict, secure coding guidelines throughout the software development lifecycle. Trained developers perform manual/automated coding reviews and we perform vulnerability scans and penetration testing methods like these:

• PCI Pen Testing
• Vulnerability scans and penetration testing:
  • PCI Pen Testing 3.2 standards (including Application Security Review)
  • Internal, external, and web application penetration testing
  • Network segmentation testing
  • Red/blue team testing

Physical Security

Tabs are kept tight on things like building entrances and data centers. Security cameras, controlled access to buildings and sensitive rooms, and certain physical authentication methods make sure that the only people near our data centers are the ones who are supposed to be.