Security

Our Security Team is on call 24/7 to respond to security alerts and events.  

Our network is protected through the use of Azure Security Services including Azure Defender for Cloud, integration with our Cloudflare edge protection networks, regular audits, and network intelligence technologies, which monitor and/or block known malicious traffic and network attacks.

Network security scanning provides us with deep insight for quick identification of noncompliance / suspicious behaviors and potentially vulnerable systems.

In addition to our extensive internal scanning and testing programme,  CatalystOne not only conducts continuous internal penetration tests, but also employs third-party security experts to perform a broad penetration test of the CatalystOne application on an annual basis +.

Our Security Incident Event Management (SIEM) system gathers extensive logs from important network devices and host systems. The SIEM alerts on triggers that notify the Security team based on correlated events for investigation and response.

With the use of world class security tools, we are able to detect and prevent intrusion attempts automatically. Alerts are sent automatically to the Security and Operations Team who analyze and remediate where necessary. These tools include 24/7 monitoring and alerting. 

CatalystOne works proactively against threats to privacy and security, where our inhouse Threat Intelligence Team conducts continuous research and analysis. In addition, CatalystOne receives threat intelligence from several 3rd parties that are relevant to our environment.

CatalystOne has architected a multi-layer approach to DDoS mitigation. A technology partnership with Cloudflare provides network edge defenses, while the use of Azure scaling and protection tools provides deeper protection.

Access to the CatalystOne Production Network is restricted on an explicit need-to-know basis, utilizes least privilege, is frequently audited and monitored, and is controlled by our Cloud Delivery Team. Employees accessing the CatalystOne Production Network are required to use multiple factors of authentication.

In case of a system alert, events are escalated to our 24/7 teams providing Cloud Delivery, Application Support, and Security coverage. Employees are trained on security incident response processes, including communication channels and escalation paths.

CatalystOne maintains a publicly available status.catalystone.com webpage which includes system availability details, scheduled maintenance and releavant security events.

CatalystOne employs service clustering and network redundancies to eliminate single points of failure. Our strict backup regime with geo-replication of data allows us to deliver a high level of service availability, as Service Data is replicated across availability zones.

Our clustered architecture ensures a high level of service availability, utilizing multiple data centers to deliver the service to our customers. Data is geo-replicated between geographical locations, and infrastructure can be deployed quickly if necessary. The CatalystOne Disaster Recovery process is verified yearly. 

CatalystOne conducts a thorough Vendor Security Risk Assessment on every vendor, subprocessor and supplier, prior to any utilization.

For any vendors already in use, the Security Team runs an annual audit to ensure that the security controls, contacts, and policies in place are still acceptable.

For any new vendors, a full risk assessment is sent to the vendor's security team to understand their datacenter location, security controls, privacy policies, and internal processes ++.

CatalystOne conducts a thorough annual internal audit  based on the following (this list is not exhaustive):

• All security processes
• All security policies
• All 3rd party tools
• All subprocessors
• All partners
• SDLC
• CIS Critical Security Controls
• Access Management
• End of Line
• Vulnerability management
• Patch management
• Security Awareness
• Incident Management
• Risk Management