Security

Secure Data Centers

Fortified and secure facilities.

Compliance

Staying up-to-date on the latest industry and compliance standards is a critical requirement for all businesses. As data breaches are a more common occurrence, and fines for noncompliance are hefty, your data center provider needs to be vigilant in ensuring your requirements are met with the proper controls, procedures and processes. At OneNeck, our commitment to protect your organization means our data centers meet the following certifications:

Type 2 SSAE 16 (SOC 1): Our successful completion of the Type 2 SSAE 16 (SOC 1) examination by a 3rd-party CPA validates our organizational and information technology controls related to the audited services, ensuring they are fairly described, suitably designed and are operating effectively.

SOC 2 Type 2 (Security and Availability Trust Principles): OneNeck’s successful completion of the SOC 2 Type 2 examination by a 3rd-party CPA validates our organizational and information technology controls related to the services audited and provides reasonable assurance that the applicable trust services are met.

HIPAA: Our successful independent examination of our information security program by a CPA provides OneNeck’s healthcare customers assurance that the information security program is fairly presented and that it adopts essential elements of the Health Insurance Portability and Accountability Act Security Rule of 2003 (HIPAA) and the Health Insurance Technology for Economic and Clinical Health Act (HITECH).

PCI DSS: Compliance with the Payment Card Industry (PCI) Data Security Standard (DSS) version 3.2 as a “Level 1” service provider provides security assurance to our customers and saves them time and money when they have their own PCI DSS requirements.

ISO 27001: ISO 27001 is the best-known standard for providing requirements for an information security management system (ISMS). ISO 27001 compliance reassures OneNeck’s customers and clients that OneNeck is following the requirements which prescribe a systematic approach to managing sensitive company and client information. It leverages a risk management process, taking into considerations people, processes and IT systems.

U.S. EU Privacy Shield: The Privacy Shield Framework provides a set of robust and enforceable protections for the personal data of EU individuals. The framework provides transparency regarding how participating companies use personal data, strong U.S. government oversight and increased cooperation with EU data protection authorities (DPAs).

Physical Security

OneNeck data centers are fortresses in actual construction and accessibility. We make every effort—backed by electronic, video and biometric measures—to prevent unauthorized entry. We continuously monitor our facilities with instrumentation such as recorded video surveillance, access and egress logs, and electronic visitor logs. Our video surveillance covers the halls, access ways, data room racks and the complete exterior of our buildings. We also offer a range of managed security services that helps organizations prevent potential data compromises, network breaches and unauthorized system access.

Network Security

The massive increase in malicious network traffic and the proliferation of spam may have caused you to be concerned about the security of your network. To safeguard your network, OneNeck provides IDS/IPS (intrusion detection services/intrusion prevention services) and basic firewall services. Additional optional services may include virtual firewall services, VPN services, content filtering, spam filtering, virus filtering, spyware removal, real-time traffic analysis using net flow reporting and real-time bandwidth reporting.

Tiering Methodology

OneNeck embraces the industry’s practices and concept models for running a data center at its peak performance, efficiency, security and reliability. The concepts, related principally to a data center’s physical infrastructure reliability include: continuous maintainability, fault tolerance and compartmentalization.

Cisco’s 2018 Annual Cybersecurity Report

The attack surface for an intruder continues to increase with the explosive growth of mobile endpoints and online traffic.