Fique tranquilo utilizando a nossa assistência para governança, risco e conformidade

Manter os dados e os sistemas da sua empresa protegidos é, por si só, um grande desafio. Mas demonstrar aos auditores que a sua empresa está em conformidade com os requisitos do setor pode fazer toda a diferença. Além disso, os custos da não conformidade podem arruinar a sua empresa.

A fase de validação da conformidade das auditorias envolve a coleta de informações das atividades da empresa. Isso assegura que os controles implementados foram projetados e estão operando com eficiência, além de estarem de acordo com as políticas definidas pela organização de segurança.

Por isso oferecemos serviços abrangentes de segurança e conformidade. Nossos especialistas em segurança empregam as principais tecnologias e práticas recomendadas para apoiar seus esforços de atender às exigências normativas, geralmente a um custo de propriedade menor do que o das soluções desenvolvidas internamente.

Certificações de conformidade e padrões de segurança da Rackspace

Certificações de conformidade	Regulamentações globais e privacidade
ISO/ IEC 27001 ISO 14001 ISO 18001 ISO 9001 SOC 1 (SSAE 18) SOC 2 SOC 3 PCI DSS Level 1 FedRAMP JAB P-ATO NIST 800-53 FISMA NIST 800-171 (“DFARS”) CJIS ITAR FIPS 140-2 HITRUST	HIPAA HITECH Privacy Act Swiss-US Safe Harbor Content Delivery & Security Association (CDSA) Membro da Tech UK

“It is probably true to say that without the considerable amount of help from Rackspace we could not have passed the exceptionally stringent PCI audit. Rackspace certainly went above and beyond their remit to ensure that everything was perfect for us.”

Aingaran Somaskandarajah

Technical Lead, Oyster Card

Controles de segurança e conformidade utilizados pela Rackspace

Physical Security

At all of our data centers:

Access is limited to authorized personnel
Badges and biometric scanning control access
Security cameras provide video surveillance
Independent firms perform annual audits

Environmental Controls

All of our data centers have the following:

Dual power paths into the facility
Uninterruptable power supplies (N+1 or greater)
Diesel generators (service agreements with fuel suppliers)
Fire suppression, smoke and flood detection

Network Infrastructure

Our network infrastructure provides the following:

High-performance bandwidth
Properly trunked and secured cables
Proactive monitoring and route management
Guaranteed uptime (backed by Service Level Agreements)

Human Resources

All of our data center employees:

Are screened carefully and must pass background checks
Sign non-disclosure and confidentiality agreements
Undergo annual security awareness training

Operations Security

Our data center operations conform to:

ISO 27001/2-based policies and annual review
Documented change management procedures
Secure document and media destruction policies
Incident management and business continuity plans
Continuous monitoring and third-party reviews

A Shared Responsibility

Cloud security is a shared responsibility. While your cloud platform provider is responsible for securing their cloud services, you also need to ensure that your environment is configured with security in mind. This includes the way your customers’ sensitive data is handled.

Sensitive data needs to be stored securely and remain accessible to authorized personnel only. And you must be able to demonstrate this to meet industry compliance requirements. How confident are you that in-house resources can properly secure, monitor and manage your systems?

Our certified security experts can help configure your environment to meet your compliance requirements. So, you — and your customers — can feel confident that your environment is stable and secure, 24x7x365.