IBM ISS operates five SOCs around the world to provide you with the highest level of around-the-clock protection and service. These state-of-the-art facilities are staffed 24/7/365 to provide real-time analysis and early warning notification of security events to MSS customers. Tour the SOC. SysTrust Certification ISS has achieved multiple SysTrust certifications from Ernst & Young, attesting that its operational practices and controls conform to the SysTrust availability, security and confidentiality principles. The SysTrust Seal verifies that a report has been issued indicating that such principles have been examined by an independent auditing firm in conformity with the rigorous American Institute of Certified Public Accountants (AICPA) and the Canadian Institute of Chartered Accountants (CICA) Trust Services Principles & Criteria. Read ISS' SysTrust Report. SOC Security Features ISS' four state-of-the-art, fully-certified and highly secure-redundant SOCs are designed to ensure that mission-critical systems, electrical systems, data processing and communication links are protected from any single point of failure. Physical Security - Security guards
- SOC visitor identity screening
- CCTV monitoring
- Biometric access device
- Intruder response procedure
- Employee background checks
Facilities & Infrastructure Protection - Below ground facility
- Redundant network circuits
- Redundant HVAC
- Power protection
- Uninterrupted power supply
- Diesel backup power generation
- Fire protection
- Pre-action sprinkler system
- FM-200 gas
- Dual-zone smoke/heat detection
- 24/7/365 on-site fire response team
Network & Computer Security - Network
- Internet perimeter firewalls
- Intrusion detection/prevention systems
- 24/7/365 intrusion monitoring
- URL blocking
- SecureID authentication
- Virus protection
- Computer
- Password protection
- Virus protection
- OS & database scanning
- Secure access placement
- Audit trailing
Policies, Procedures & Programs - Security policy
- Privacy policy
- Disaster recovery plan
- Data Backup Program
- Security Incident Response Team ("SIRT")
- Change control program
- Penetration testing programIndependent compliance audits
| 
