The 2013 Verizon Data Breach Investigations Report revealed more than 47,000 security issues across 27 countries of the world with 621 confirmed data breaches this year alone. In fact, only 38% of the victims were larger organizations and the rest comprised of financial organizations, retail chains, restaurants, manufacturing, transportation, information and professional services firms. Nobody’s immune, no target is too small or insignificant or too large.
However, less than 1% of the breaches in this year’s study used tactics rated as ‘high’ on the VERIS difficulty scale for initial compromise. In fact, 78% of the techniques used in hacking were in the ‘low’ or ‘very low’ categories of the VERIS difficulty scale. Thus in spite of it being very easy to protect oneself from data security threats, some enterprises just ignores the need.
Fort Knox on the Cloud
In continuation to our previous blog, where we identified the primary security concerns of an HRIS/HRMS – today we analyze PeopleWorks on the basis of the same criteria.
Physical data location –
- Whether it’s a private cloud or public cloud? – PeopleWorks is hosted on a Public Cloud from servers belonging to Bharti Airtel. In comparison to the Private Cloud used in our initial stages, we intentionally chose the Public cloud as it is more scalable, i.e. it can easily accommodate the humongous amount of data from our rapidly expanding client portfolio.
- Data Center Security & Access control: The PeopleWorks solution is hosted from the Bharti Airtel servers at Noida. These servers, inside a state-of-the-art datacenter, keep your data as safe as in Fort Knox with its world-class data security measures.
Unauthorized data access –
- What are the different levels of security measures? – The PeopleWorks solution is secured against hacking or unauthorized access attempts at three different levels –Network security, Web application security and Database security. Secured behind multiple layers of firewalls with its only web server in the Demilitarized Zone (DMZ), anti-virus support for all user uploaded files and multi-tenacity architecture of the application – PeopleWorks gives you the security of a Private cloud at the price of a Public cloud. In addition there is also a virtual keyboard for extra safety from malware & spyware and ‘Captcha’ verification for generating new passwords.
- What is the type of encryption used for data transfer? – SSL which stands for ‘Secure Sockets Layer’ is the industry standard for securing data transfer over the internet. It makes the green lock icon visible on your browser’s address bar for securing even online banking transactions. PeopleWorks uses the same security protocol at a higher than standard encryption rate of 256-bits. Validated by the Certificate Revocation List procedure for every single data transfer – the PeopleWorks SSL certificate is issued by Entrust Certification Authority – L1C, with a 2048 bit RSA Public key.
Business Continuity Plan (BCP) – As the growth partners of eminent enterprises who value both time and their data, the PeopleWorks solution has an effective BCP in place. With periodic Backup, a Disaster Recovery site and Tertiary database backup servers with a different service provider with a 5 minutes point of recovery – we are ever ready for times when everything goes wrong.
PeopleWorks is a cloud-based employee lifecycle management solution which manages all aspects of an employee’s life from hire to retire. By letting your HR staff reduce time-spent on non-value adding jobs, promoting Employee Self Service and reducing your operational dependency on Paper, our solutions help you achieve Growth Uninterrupted.