What Makes i-Sight Secure & Reliable?

Standard Operating Procedures

CEC follows a very detailed set of operating procedures.  The procedures govern every aspect of our business to ensure that everything from our hiring practices to our change control processes are executed to ensure security of customer information.

Secure Data Centers

Our world class data centers are located in secure, unmarked “class A” facilities with multiple connections to Telco fibre rings, advanced security systems, 24 hour Network Operation Centers, fire suppression systems, uninterrupted power supply and high capacity generators.

Access control and physical security

• Biometric security enforced through an iris scanner
• Guarded entrances have security cameras to scan and digitally record the interior and exterior of the facility 24 hours a day
• Video surveillance incorporates low-light technology to allow clear visibility at night
• Unified security breach alarm with access monitoring
• Client security escort
• Electronic motion detectors
• Reinforced exterior and interior walls
• Raised floors for secure routing of cables
• Secure staging rooms for setup and maintenance of equipment

In order to access hardware within the datacenter CEC personnel must provide suitable ID or must pass (retina scan) biometric authentication.  Information on any software or hardware to be added or removed from the CEC equipment must also be listed prior to the visit.  The datacenter itself is protected with a live security guard 24/7.  Surveillance cameras are operated both externally and internally and all authorized visitors are accompanied by a data center escort at all times of their visit. Within the datacenter access is also controlled using electronic locks.

Only CEC network and application server personnel have access to the hosting environment. Logs are maintained of all visits and the purpose of those visits.

Environmental Controls

• Redundant Liebert air conditioners and compressors
• Humidity controlled
• Raised floor designed for efficient cooling
• Fully redundant UPS
• Static transfer switches
• Redundant 650 Kilowatt generators
• Generators housed in underground bunker
• All power from redundant NuWave modular UPS
• High bandwidth capacity
• Network neutral, multi-homed network

Power

• Fully redundant UPS
• Static transfer switches
• Redundant 650 Kilowatt generators
• Generators housed in underground bunker
• All power from redundant NuWave modular UPS

Network

• High bandwidth capacity
• Network neutral, multi-homed network

i-Sight runs on a “multi-homed” network, consisting of redundant backbone connections to four major backbone providers. With high-speed DS3 and OC3 connectivity to four major networks, traffic bypasses busy Network Access Points (NAPs) and is sent quickly to end-users.

In addition to the multi-homed backbone connections, powerful Cisco routers and switches are at the core of the network to provide redundant internal connectivity. This network infrastructure provides an additional level of protection against hardware failures.

Network connections into the Data Center are provisioned over diverse fiber and multiple Telco providers, eliminating the risk of a single fiber cut anywhere in the public network taking down our high-speed links to the Internet. The combination of these four backbone connections provides an aggregate bandwidth of over 100 MBPS.

Fire detection and suppressions

• Early smoke detection system
• FM-200 gas fire suppressions
• Back-up sprinkler system – pre-action dry pipe water-based

Secure Transmission

All connections via 128-bit SSL ensuring secure connection from browser

Network Protections

• Firewalls in place
• Network based intrusion detection systems report events for logging and reporting
• Third-party service provider scans network externally

Disaster Recovery

• CEC maintains a secondary data center infrastructure for disaster recovery
• DR site data is updated daily via encrypted links
• DR tests conducted to ensure rapid recovery time

Backups

• All data is backed up to tape each day
• Tapes are maintained on a rotating schedule of incremental and full backups