TracCloud: Security
From Redrock Wiki
This page is still in progress! Come back later to learn more.
TracCloud Security Details
This page details TracCloud's certifications, hosting information, etc.
Full Compliance:
- NIST SP800-53 rev. 5 High Baseline
- CSA CAIQ v4
- ADA
- HECVAT (available upon request)
- FERPA
- WCAG (VPAT available upon request)
Certifications:
- TX-RAMP Level 2
- CSA-STAR Level 1
Hosting & Security:
- Highly scalable and distributed AWS Cloud
- Data is encrypted in transit using TLS, both internally and externally to the user
- Data is encrypted at rest using industry standard AES 256bit encryption
- Web Access Firewall (WAF)
- Encrypted logging
- Automated continuous backups
- Network intrusion detection
- Host-based intrusion detection
- Continuous vulnerability and software inventory scans
- Role-Based Access Control (RBAC)
Integration:
- Single-Sign-On (SSO): SAML, CAS, LDAP
- Mail: SMTP, OAuth (Modern Auth)