ERM Online

ERM Online Security

Servers and networking

All servers are hosted by Azure and located in Australia. Servers are continuously patched for operating system and application updates.

Storage

All data submitted through the ERM online application is stored in databases hosted in Azure. All data is encrypted at rest with AES-256 and sophisticated encryption keys management.

Coding and testing practices

ERM Online leverages industry standard programming techniques such as having a documented development and quality assurance processes, and following guidelines such as OWASP, to ensure that the application meets security standards.

Employee access

We follow the principles of least privilege in our software development and levels of access to application data. Employees follow these principles when resolving customer support requests and diagnosing possible software bugs that may arise during the development of the ERM Online application.

System monitoring and alerting

The ERM servers and applications are continuously monitored and alerts generated for any detected issues.

Service levels and backups

Application servers and databases are backed up to a geographically separate Azure Data Centre in Australia. Backups are tested for restorability as part of our regular Disaster Recovery Planning.

Vulnerability testing

Servers and web applications are regularly tested by independent 3rd parties to detect any vulnerabilities or other security issues.