立即与支持人员聊天
与支持团队交流

On Demand Global Settings Current - Security Guide

Third party Assessments and Certifications

Penetration testing

On Demand has undergone a third party security assessment and penetration testing yearly since 2017. The assessment includes but is not limited to:

•
Manual penetration testing
•
Static code analysis with Third Party tools to identify security flaws

A summary of the results is available upon request.

Penetration testing

Third party Assessments and Certifications

On Demand has undergone a third party security assessment and penetration testing yearly since 2017. The assessment includes but is not limited to:

•
Manual penetration testing
•
Static code analysis with Third Party tools to identify security flaws

A summary of the results is available upon request.

Certification

 

On Demand is included in the scope of the Platform Management ISO/IEC 27001, 27701, 27017 and 27018 certification:

ISO/IEC 27001:2022 Information technology — Security techniques — Information security management systems — Requirements: Certificate Number: 1156977-8, valid until 2028-07-27.

ISO/IEC 27701:2019 Information security, cybersecurity and privacy protection — Privacy information management systems — Requirements and guidance: Certificate Number: 1156977-8, valid until 2028-07-27.

ISO/IEC 27017:2015 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services: Certificate Number: 1156977-8, valid until 2028-07-27.

ISO/IEC 27018:2019 Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors: Certificate Number: 1156977-8, valid until 2028-07-27.

Quest Software, Inc. has successfully completed a SOC 2 examination of its On Demand solution. The examination was performed by an independent CPA firm for the scope of service described below.

Examination Scope: Quest On Demand Platform

Selected SOC 2 Categories: Security

Examination Type: Type 2

Review Period: August 1, 2024, to July 31, 2025

Service Auditor: Schellman & Company, LLC

 

Operational Security

Access to Data

Access to On Demand Core data is restricted to Quest Operations team members. On Demand developers have no access to customer production data.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级