OnlineTech's Security Framework

Online Tech takes security seriously. It’s not just a claim. Beyond just a firewall or biometrics, Strong data center security requires a complete security framework that includes:

1. Security Training - repeated training for everyone on the data center operations team
2. Business Practice Security covers business process and data security standards
3. Physical Security covers the premises security of our Data Centers
4. Logical Security covers the network security of OTNet and it’s components
5. Change Management covers management of any changes in the data center - both logical and physical

Data Center Security Training

• Security Awareness is standard and repeated training for every Online Tech staff member
• Ability to send messages instantly to every Online Tech staff member for security issues
• Security announcements when necessary at company wide daily announcements
• Security Officer responsible for regular audits and awareness

Data Center Business Practice Security

• Password policy enforced with automated security management system.
• Information classified into Security Zones
• Special Security Zone for client only access to meet HIPAA, PCI, CISP and other audited environments while still allowing Online Tech to manage your environment

Data Center Physical Security

• All data centers require two factor authentication to enter the data center
• Biometrics at the Exchange Drive and City Center data centers.
• Security cameras at all data centers with minimum 90 day of recorded DVR
• UPS and core network areas secure from colocation area
• All racks have combination and key locks
• No outside facing ground floor walls or windows in any colocation areas
• Logging of all entrances by key card to each location
• Environmental monitoring for temperature and other air metrics
• Visitors log, badges and other proprietary security procedures

Data Center Logical Security

• Private gigabit OTNet connects Online Tech’s Michigan Data Centers, doesn’t travel the internet
• Redundant gigabit connections to the Internet
• Each client has private VLAN(s) on OTNet’s Core
• Always redundant firewalls, for uninterrupted security and ability to upgrade while in production
• Universal Threat Management protects against DOS, Port Scans and other advanced intrusion attacks

Change Management

• Documented change management procedures include security review
• OTPortal assures support requests are from trusted source
• Regularly scheduled pro-active confirmation of security credentials with all OTPortal clients
• All recruits are carefully screened including background checks by outside firms
• Employees are given security training at hiring with refreshers at regular interval

Data Centers

• Michigan Data Centers
• SAS 70
• Locations
• Network Infrastructure
• Data Center Security