Backup and Security Backup and Security Security They are two options available which are cloud-based, or own server based. Short video on security - Click here Cloud Based access All cloud-based servers have the following security in place. An encrypted SSL certificate to access system Eset Antivirus software on server for virus and malware protection Server sits behind a firewall Only certain ports are opened Port 80 is blocked RDP is blocked Limited staff access to the server Limited staff access to client data Each company has their own database and is NOT in one large database This means a company can take their own backups offsite Move to their own server or back to the cloud Passwords on servers are changed every six months or whenever a staff member leaves the organization Server passwords have a minimum of 50 characters with Capitals, numbers and special characters Huge ERP database is protected with a password Servers are located in data centers with no-one allowed access. Each user has their own login username and password Passwords have a minimum of 8 characters long with a Capital and number as minimum requirement Two factor Authentication can be enabled per user Automatic expire dates of passwords can be enforced to Monthly, quarterly or yearly Past passwords cannot be repeated within a year Logs are created on each form click User has automatic 90-minute time out if not working in the system User will be automatically logged out of the system if they log onto another computer with the same access Own Server based For extra security where you don't want to run cloud-based access. A company can opt for own server installation this means the installation of the software is done on one of your servers where you control access to server. The company can make use of VPN (Virtual Private Network) access to the system via browser. Have all the above in place for security. SSL definition An SSL (Secure Sockets Layer) certificate is a digital certificate that authenticates a website’s identity and enables an encrypted connection. Here’s what it means to have one: Encryption : SSL encrypts data transferred between the user’s browser and the website, ensuring that sensitive information like passwords, credit card numbers, and personal details are protected from eavesdroppers. Authentication : It verifies that the website is legitimate and not a fake site set up to steal information. This helps build trust with users. Data Integrity : SSL certificates ensure that data sent and received is not tampered with during transit. SEO Benefits : Search engines like Google give a ranking boost to websites with SSL certificates, which can improve visibility. Trust Indicator : Websites with SSL certificates display a padlock icon in the address bar, and their URLs start with “https://” instead of “http://”. This signals to users that the site is secure. Backup Procedure The current backup for all Huge ERP companies controlled by Huge Software is a full backup of the Huge ERP data every night on the same server. Short video on security backups - Click here South African Huge ERP Servers runs the following processes: 1 Servers are located in a secure data storage facility which no one has access to. 2 Full Huge ERP backup runs every night and stored on the same drive as the database 3 A full server image of the server system including all data is then backed up every week. 4 Every night, all the backups including Huge ERP data, database and attachments are backed up off site to an external data center in case of fire, flood, theft, water damage or cyber attack.  These backups are done by a program called Crashplan and run between 7pm and 6am, 7 days a week. 5 Servers have RAID disk drive failures as a hardware fail over.  One to two drives spare in case of hard drive failure. 6 It is encouraged for the client to download a copy of their data to hold.  This is accessible within the system via security roles There is currently an option available for a second backup server to be hosted in New Zealand in case of a full Power Grid failure.  Speak to our consultants for this. New Zealand Huge ERP Servers runs the following processes: 1 Cloud server is located in Christchurch NZ in a secure location. 2 Full Huge ERP backup runs every night and stored on the same drive as the database 3 A full server image of the server system including all data is backed up four times a day, 8am, 12am, 4pm and 8pm. 4 These backups are moved to another backup server in Picton. 5 Every night, all the backups including Huge ERP data, database and attachments are backed up off site to an external data center in case of fire, flood, theft, earthquake, water damage or cyber attack.  These backups are done by a program called Crashplan and run between 7pm and 6am, 7 days a week. 6 Servers have RAID disk drive failures as a hardware fail over.  One to two drives spare in case of hard drive failure. 7 It is encouraged for the client to download a copy of their data to hold.  This is accessible within the system via security roles