Laserfiche WebLink
Security Policies and Procedures <br />D. Enforcement <br />Any workforce member found to have violated this policy may be subject to <br />disciplinary action, up to and including termination of employment. See Sanction Policy. <br />XXIV. Networks <br />A. Overview <br />Virtru's networks and devices shall designed, deployed and operated in a manner so as <br />to provide proper levels of protection for the data being accessed and transported. <br />Significant changes in network designs must be piloted before deployment. <br />Mechanisms must be in place to alert the ISO of possible attacks and breaches, to <br />include: <br />1. Denial of service attacks <br />2. Improper access <br />3. Virus infections <br />4. Unauthorized software installations, email, FTP or other improper usage <br />Analysis must be conducted at least annually to validate the failure mode and recovery <br />for all devices, network circuits and protocols. See Change Logs for details. <br />Responsibilities must be defined for: <br />1. Administration of network and communications connections <br />2. Operations of all devices <br />3. Monitoring <br />4. Timely review of audit logs and response to alerts or alarms <br />S. Review of unusual patterns of usage or activity <br />To minimize risks, any network connections or network segments should be <br />disconnected when not in use. <br />B. Monitoring <br />Virtru uses AlienVault's Unified Security Management System to monitor all traffic on <br />their network. Notifications are set to alert the IT staff of any unusual traffic and <br />vulnerabilities, as well as log any security events that may occur. <br />C. Access control and physical security <br />Sites where Virtru's network equipment or communications lines exist are considered <br />to be high -value and are subject to the access control and physical security rules <br />Rev.2015.8.6 <br />47 <br />