dbACE Security Features
dbACE - Our GRC platform has been designed with a security-first approach to ensure the confidentiality, integrity, and availability of user data. Recognizing the growing sophistication of cyber threats and the importance of trust in digital platforms, our platform integrates a comprehensive set of security controls aimed at safeguarding sensitive information, mitigating risks, and preventing unauthorized activities.
dbACE, has integrated a robust set of security features to safeguard user data, prevent unauthorized access, and protect against fraudulent activities. Given below is a comprehensive overview of the security features across various areas:
Multi-Factor Authentication (MFA)
Overview: MFA ensures that users are who they claim to be. It is implemented for all sign-ins.
Two Verification Methods: When users sign into any of our offerings, the system verifies their identity using at least two different factors. These may include recognizing devices or locations, as well as requiring the user to enter a one-time code sent to them. This provides an extra layer of protection beyond just a username and password.
Data Encryption (Stored Data)
Overview: All sensitive user data stored in the system is encrypted.
Encryption Process: Data is converted into a secure code that only the platform can decrypt, ensuring that unauthorized parties cannot read or access the data. This encryption mechanism guarantees that only authorized individuals (the user and our platform) have access to sensitive information, even if attackers gain access to the storage system.
Proactive Fraud Monitoring and Alerts
Overview: dbACE actively monitors potential scams and fraud.
Scam Prevention: dbACE regularly provides security notices, which include information about common fake emails and scams targeting users, along with actionable advice on how to avoid falling victim to these frauds.
Fraud Detection: In addition to scanning for external threats, dbACE’s security team is always on the lookout for any fraudulent activities that could potentially affect users, ensuring a high level of security awareness.
Centralized Account Management
Overview: Users can manage all their interactions with dbACE from a single account.
One Account, Multiple Offerings: Whether using one or multiple dbACE services, users can sign in using a single dbACE Account. This centralized account system ensures that all personal data is stored securely in one location and allows users to easily control their security settings.
Security Settings: The user can manage and adjust their security settings from a single, convenient interface.
Ongoing Security Advancements
Overview: dbACE constantly improves its security measures.
Continuous Testing: dbACE is always testing and refining its cybersecurity strategies to stay ahead of emerging threats.
Adaptability: As technology evolves, so does our security, maintaining robust protection for users.
Storage Repository
Overview: dbACE utilizes Cloud Storage for storing documents and other files.
Scalable and Cost-effective: Cloud Storage provides a flexible, cost-effective, and scalable solution for storing various data types, from documents to backups.
Role-Based Access Control: Access to the files is restricted via role-based access control (RBAC), ensuring only authorized individuals or systems can access sensitive documents.
Multitenant Implementation
Overview: dbACE uses a multitenant architecture for its web portal, ensuring proper isolation between tenants (users).
Tenant Isolation: Strong separation between tenants is maintained, ensuring no unauthorized access to data across different customer accounts.
Continuous Monitoring: Regular monitoring and auditing of the multitenant system prevents potential data breaches and unauthorized access.
Security Testing Using OWASP
Overview: Our team regularly performs security assessments to ensure vulnerabilities are identified and mitigated.
Penetration Testing: Our team conducts penetration testing to actively identify weaknesses and test the resilience of our security systems.
Automated Vulnerability Scanning: Automated security tools scan for known vulnerabilities in our platform’s web application and frameworks, minimizing security risks by promptly addressing identified weaknesses.
Role Segregation and User Access Control
Overview: dbACE enforces strict role-based access control to ensure that users can only access what they are authorized to.
Admin Users: Administrators have elevated privileges to manage systems, access sensitive data, and adjust security settings. Proper management of these administrative roles is crucial for minimizing risks.
Auditor Role: A dedicated auditor role ensures accountability and transparency by regularly reviewing sensitive data and processes. This role helps maintain trust and supports compliance with regulatory obligations.
General User Role: General users have limited access, typically restricted to viewing or interacting with non-sensitive data. They are not authorized to access sensitive configurations or administrative features.
Compliance and Regulatory Framework
Overview: Our team ensures that our security practices align with industry standards and regulatory requirements.
Audit and Reporting: Regular audits ensure that dbACE adheres to compliance standards and provides transparency in its security practices.
Regulatory Compliance: dbACE’s security features are designed to meet global data protection standards, ensuring that customer data is handled in accordance with legal and regulatory requirements.
