DCS utilises Azure for hosting the back-end, the Administration Console and the encryption key vaults.
Azure meets a range of compliance requirements for ensuring both the physical and cyber security of our environment, including: (confirm all of the following apply for Azure -was for AWS)
•ISO 9001, 27001, 27017, 27018 IRAP
• PCI DSS Level 1 G-Cloud [UK]
• SOC 1, 2 & 3 G5 [Germany]
Our Azure segmented multi-layer, multi-region, redundant environment access is highly restricted. Access control and strong password policies prevent login from unauthorised locations that may compromise the system security. Access to the system is limited to restricted IP addresses, with forced Two-Factor Authentication (2FA). Our environment is backed-up, patched, has a high level of network security with tightly controlled Role-Based-Access-Control (RBAC)