post

<div class="section post-body">
                          <span id="hs_cos_wrapper_post_body" class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="meta_field" data-hs-cos-type="rich_text"></p>
<p>When it comes to <a href="../../../com/trginternational/blog/5-ways-cloud-solutions-power-business-agility.html" target="_blank" rel="noopener">Cloud deployment</a>, <strong>security</strong> is top of mind for  all concerned. The <a href="../../../com/trginternational/blog/what-is-infor-cloudsuite-erp-syteline.html" target="_blank" rel="noopener">Infor CloudSuite</a> team uses best-practice protocols and a thorough, continuous improvement approach that gives you both confidence and peace of mind. The following information provides a detailed look at Infor’s security approach.</p>
<h2>Defense-in-depth</h2>
<p><strong>Infor CloudSuite</strong> does not rely on any single security device, technique, or practice for data assurance. Instead, Infor CloudSuite employs a “defense-in-depth” strategy to implement multiple layers of overlapping security that safeguard your data through each link of the chain and ensure a high level of solution availability.</p>
<p>These security controls are enforced by a team of specialists who are constantly monitoring and improving our security posture to stay ahead of threats.</p>
<p style="text-align: center"><img decoding="async" style="width: 570px" alt="Infor CloudSuite Security: Defense-in-depth" src="https://blog.trginternational.com/hs-fs/hubfs/images/Infor-CloudSuite-Security.png?width=570&amp;name=Infor-CloudSuite-Security.png" width="570"></p>
<h2>Infor CloudSuite security</h2>
<h2>1. Application security</h2>
<p>To ensure security is built into Infor’s applications from the start, security requirements for each product are defined and then architected into the software design. Code reviews allow product teams to share secure coding practices they have gathered through own research or past implementations, while a focus on the Top 10 Open Web Application Security Project ensures that the most prevalent threats are being acknowledged and mitigated. </p>
<h2>2. Network security</h2>
<h3>Security through separation</h3>
<p>Infor CloudSuite’s networks are independent, meaning they are separated from the general Infor corporate network. </p>
<h3>Layered defense architecture</h3>
<p>Infor CloudSuite’s emphasis on security has resulted in an architecture that has multiple layers. These layers are built to protect against both very specific attacks (e.g., DDoS) and more general information gathering attacks (e.g., vulnerability scanning). The implemented mechanisms have the ability to proactively defend against an attack, while also providing real-time monitoring of current threats from the Internet.</p>
<h3>Wired and purposeful—never wireless</h3>
<p>At no point is traffic within the Infor CloudSuite network broadcast from an antenna or wireless transmitter that would expose it to interception by third parties equipped for wireless snooping, now a sophisticated and accessible field. </p>
<h3>Secure environment in an insecure world</h3>
<p>The Infor CloudSuite system had to be designed to maintain network security even when serving clients who don’t use best security practices. For example, Infor CloudSuite would need to be protected from a user with a compromised system not running the latest anti-virus protection. </p>
<p><strong>Read more: </strong><a href="/maximize-manufacturing-productivity-with-infor-cloudsuite-industrial-9.01" rel=" noopener">Boost Productivity with Infor CloudSuite Industrial 9.01</a></p>
<h2>3. Physical security</h2>
<h3>Physical security of Infor CloudSuite’s IT infrastructure</h3>
<p>Physical security is paramount and pervasive throughout the implementation of Infor CloudSuite. However, it is most easily identified around our best-in-class data centers. These biometric-protected data centers house the solution’s network and IT infrastructure.</p>
<p style="text-align: center"><img decoding="async" style="width: 954px" alt="Infor CloudSuite Vertical" src="https://blog.trginternational.com/hs-fs/hubfs/images/Infor%20CloudSuite%20Vertical.png?width=954&amp;name=Infor%20CloudSuite%20Vertical.png" width="954"></p>
<h2>4. Operations security </h2>
<h3>IT infrastructure security</h3>
<p>Infor CloudSuite’s strategic IT services are built, maintained, and administered in compliance with the security standards required for global data centers. In addition, technical elements of Infor CloudSuite security are supported by operational practices. </p>
<p>Infor CloudSuite’s security ethic has been carried over into the structure of its operations, where specific teams have prescribed roles and responsibilities. Access to critical Infor CloudSuite systems is structured to ensure separation of duties and administered under the principle of least privilege. </p>
<h3>Strict data transmission protocols </h3>
<p>The architecture of the Infor CloudSuite software allows Infor to leverage the concept <br />of defense-in depth-security by using technologies such as SSL/TLS and transaction-based business logic.</p>
<h3>Encryption and privacy</h3>
<p>Encryption is used extensively within the Infor CloudSuite environment to ensure that data is protected. While in-transit, data is encrypted using appropriate mechanisms that include TLS/SSL, PGP, and secure FTP. When required, data-at-rest is encrypted using database, file system, or other appropriate encryption capabilities.</p>
<p><strong>Read more: </strong><a href="../../../com/trginternational/blog/a-review-of-infor-cloudsuite-solutions-cloud-erp-for-manufacturing.html" rel=" noopener">Manufacturing ERP Review: Infor CloudSuite Solutions</a></p>
<h2 class="post-listing-simple">5. Monitoring </h2>
<h3>Dynamic password management</h3>
<p>Infor CloudSuite maintains centrally managed passwords to protect administrative access points to the <br />Infor CloudSuite network, applications, and IT infrastructure. To defeat password cracking by brute force, the system registers unsuccessful password attempts and patterns, alerting network management staff to investigate.</p>
<h3>Management of digital certificates </h3>
<p>Every secure session with a web server has an important aspect—the ability to authenticate the server. Certificates are the foundation of a secure cloud implementation, where each primary element of the Infor CloudSuite solution presents a verifiable identity.  </p>
<h3>Managed configurations</h3>
<p>When Infor CloudSuite’s network and systems architects design and configure our systems, they make choices that promote and enable security.</p>
<h3>Data ownership</h3>
<p>Within Infor, customers own their data, and it is accessible at all times. Customers can also have all data returned at the end of the engagement.</p>
<h3>Logging, monitoring, auditing, and incident response</h3>
<p>Infor CloudSuite’s staff monitors the network using a set of tools, specifically configured for this solution, to effectively manage logs and alerts. </p>
<h3>Customer data not captured by monitoring processes</h3>
<p>The only network details collected by our logging and auditing systems are application, system, and network logs and metadata. Our policy is to not collect log information that contains actual customer data.</p>
<h3>Security event recognition</h3>
<p>Infor CloudSuite security encompasses monitoring, characterizing, reporting, and handling of security incidents, including technical escalation and customer notification paths.</p>
<h3>Policies and procedures</h3>
<p>Infor CloudSuite has implemented a comprehensive security policy that focuses  on the ISO 27001 best practice standard to provide the guiding principles for our focus on confidentiality, integrity, and availability.</p>
<h3>ISO-27001 compliance</h3>
<p>The ISO-27001 standard is an internationally recognized credential of a securely designed and soundly run information security management system. </p>
<h3>SSAE 16 assessments</h3>
<p>The Infor CloudSuite’s Data Centers undergo SSAE 16 SOC 1 Type II assessments  to provide an independent auditor’s assessment of the controls and adequacy of the identified controls in meeting their objectives.</p>
<h3>Regulatory compliance</h3>
<p>Whenever an application deals with data that requires regulatory compliance  (e.g., HIPAA, SOX, PCI, GLBA, regional privacy laws, etc.), Infor CloudSuite works with customers to ensure that the controls needed to meet those requirements are in place.</p>
<p style="text-align: center">
                            <span class="hs-cta-wrapper" id="hs-cta-wrapper-08e0e102-5ec0-465f-884b-7f6d99534cb7"><span class="hs-cta-node hs-cta-08e0e102-5ec0-465f-884b-7f6d99534cb7" id="hs-cta-08e0e102-5ec0-465f-884b-7f6d99534cb7"><br />
                              <a href="https://cta-redirect.hubspot.com/cta/redirect/125873/08e0e102-5ec0-465f-884b-7f6d99534cb7" target="_blank" rel="noopener"><img decoding="async" class="hs-cta-img" id="hs-cta-img-08e0e102-5ec0-465f-884b-7f6d99534cb7" style="border-width:0px" src="https://no-cache.hubspot.com/cta/default/125873/08e0e102-5ec0-465f-884b-7f6d99534cb7.png" alt="Request Cloud Services Demo"></a></span></span>
                            </p>
<p></span>
                         </div>


How Data is Protected in Infor CloudSuite with These 5 Security Layers

OTHER FEATURED POSTS

Subscribe for latest updates