{"id":1909,"date":"2023-12-13T14:46:31","date_gmt":"2023-12-13T13:46:31","guid":{"rendered":"https:\/\/new.logex.com\/no\/?page_id=1909"},"modified":"2024-01-04T09:56:24","modified_gmt":"2024-01-04T08:56:24","slug":"security","status":"publish","type":"page","link":"https:\/\/site.logex.com\/no\/security\/","title":{"rendered":"Security"},"content":{"rendered":"\n<div class=\"wp-block-group alignfull is-style-attached-left has-logex-cream-100-background-color has-background is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-columns alignfull mobile-reverse-order is-style-no-gap is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"padding-top:0%;padding-right:0%;padding-bottom:0%;padding-left:0%\">\n<div class=\"wp-block-columns are-vertically-aligned-center has-justify-content-center is-layout-flex wp-container-core-columns-is-layout-fcb8b637 wp-block-columns-is-layout-flex\" style=\"padding-top:6%;padding-right:6%;padding-bottom:6%;padding-left:6%\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:600px\">\n<h1 class=\"wp-block-heading has-logex-cream-50-color has-text-color has-link-color has-euclid-font-family has-large-font-size wp-elements-1\" style=\"padding-top:0;padding-bottom:0\">LOGEX Security<\/h1>\n\n\n\n<h2 class=\"wp-block-heading has-logex-grey-0-color has-text-color has-link-color has-euclid-font-family has-huge-font-size wp-elements-2\" style=\"padding-top:0;padding-bottom:0\">We earn trust by <em>providing assurance<\/em><\/h2>\n\n\n\n<p class=\"has-margin-bottom-0 has-logex-cream-50-color has-text-color has-link-color wp-elements-3 wp-block-paragraph\">This page outlines LOGEX&#8217;s internal processes for developing, maintaining, and securing its SaaS Financial Analytics solutions.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-large has-margin-bottom-0 mobile-border-radius-left-0 is-style-cover\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"907\" src=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/Stocksy_txpe78b572blmV300_Medium_1245676-1200x907.jpg\" alt=\"\" class=\"wp-image-1991\" style=\"aspect-ratio:4\/3;object-fit:cover\" srcset=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/Stocksy_txpe78b572blmV300_Medium_1245676-1200x907.jpg 1200w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/Stocksy_txpe78b572blmV300_Medium_1245676-600x454.jpg 600w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/Stocksy_txpe78b572blmV300_Medium_1245676-768x581.jpg 768w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/Stocksy_txpe78b572blmV300_Medium_1245676-1536x1161.jpg 1536w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/Stocksy_txpe78b572blmV300_Medium_1245676.jpg 1627w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-60\"><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h3 class=\"wp-block-heading has-logex-cream-100-color has-text-color has-link-color wp-elements-4\">Page contents<\/h3>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<ul class=\"is-style-none wp-block-list\">\n<li><a href=\"#Products-Legal-Entities-Covered\" data-type=\"internal\" data-id=\"#Products-&amp;-Legal-Entities-Covered\">Products &amp; Legal Entities Covered<\/a><\/li>\n\n\n\n<li><a href=\"#Privacy-Security-Compliance\">Privacy &amp; Security Compliance<\/a><\/li>\n\n\n\n<li><a href=\"#Security-Compliance\">Security Compliance<\/a><\/li>\n\n\n\n<li><a href=\"#Platform-Technology\">Platform &amp; Technology<\/a><\/li>\n\n\n\n<li><a href=\"#Application-Requirements\" data-type=\"internal\" data-id=\"#Application-Requirements\">Application Requirements<\/a><\/li>\n\n\n\n<li><a href=\"#Development-Process\" data-type=\"internal\" data-id=\"#Development-Process\">Development Process<\/a><\/li>\n\n\n\n<li><a href=\"#Security\">Security<\/a><\/li>\n\n\n\n<li><a href=\"#Identity-Access-Management\" data-type=\"internal\" data-id=\"#Identity-Access-Management\">Identity &amp; Access Management<\/a><\/li>\n\n\n\n<li><a href=\"#Availability-Back-ups\">Availability &amp; Back-ups<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-60\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-5\" id=\"Products-Legal-Entities-Covered\">Products &amp; Legal Entities Covered<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This page describes the development, maintenance, and other relevant (internal) processes\/activities undertaken by LOGEX and (or through) its associated legal entities, related to providing the LOGEX (SaaS) Financial Analytics solutions in a secure manner.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Collectively named \u201cLOGEX\u201d, the following legal entities are covered:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>LOGEX BV (The Netherlands)<\/li>\n\n\n\n<li>LOGEX Healthcare Analytics Ltd (United Kingdom)<\/li>\n\n\n\n<li>LOGEX Healthcare Analytics AB (Sweden)&nbsp;<\/li>\n\n\n\n<li>LOGEX Oy (Finland)<\/li>\n\n\n\n<li>LOGEX Solution Center s.r.o. (Czech Republic)<\/li>\n<\/ul>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-6\" id=\"Privacy-Security-Compliance\">Privacy &amp; Security Compliance<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Privacy &amp; GDPR&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">As a data analytics organisation, LOGEX acts as a data processor to perform data analysis on behalf of its clients. Therefore, LOGEX performs its activities solely on the lawful basis as described in GDPR article 6 (1) (b) (\u201cPerformance of a Contract\u201d). LOGEX only works with data exported from clients\u2019 systems and does not integrate with clients\u2019 systems, nor does it modify data within those systems. This means data within clients\u2019 systems remains unaffected and the (single) point of truth.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Given the nature of LOGEX\u2019s business, LOGEX processes not just personal data but also, as defined under GDPR, \u201cspecial categories\u201d of personal data, being information concerning individuals\u2019 health. Only authorised LOGEX employees and users at our customers will have access to this data.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX has appointed a Privacy Officer to oversee our company\u2019s compliance to GDPR and other relevant privacy regulations. The Privacy Officer works closely with our Data Protection Officers (DPOs) to establish privacy governance structures in line with international and local data protection regulations and requirements.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Any inquiries about the processing of personal data can be directed at our DPOs, for which details can be found on the corresponding local LOGEX websites.<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-7\" id=\"Security-Compliance\">Security Compliance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Customers worldwide require LOGEX to comply with both international and domestic security requirements where applicable. In order to fulfil those needs, LOGEX holds the following active security certifications and accreditations:&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-columns alignwide is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-style-rounded-30 has-logex-blue-100-color has-logex-blue-100-background-color has-text-color has-background has-link-color wp-elements-8 is-layout-flow wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--80)\">\n<h5 class=\"wp-block-heading has-logex-grey-0-color has-text-color has-link-color wp-elements-9\" id=\"block-18f76cca-de58-4a0a-85c9-efbda47cd403\">International<\/h5>\n\n\n\n<ul class=\"has-margin-bottom-0 has-logex-blue-20-color has-text-color has-link-color wp-block-list wp-elements-10\">\n<li>ISO 27001:2013&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-style-rounded-30 has-logex-blue-100-background-color has-background is-layout-flow wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--80)\">\n<h5 class=\"wp-block-heading has-logex-grey-0-color has-text-color has-link-color wp-elements-11\" id=\"block-18f76cca-de58-4a0a-85c9-efbda47cd403\">The Netherlands<\/h5>\n\n\n\n<ul class=\"has-margin-bottom-0 has-logex-blue-20-color has-text-color has-link-color wp-block-list wp-elements-12\">\n<li>NEN 7510-1:2017 + A1:2020&nbsp;<\/li>\n\n\n\n<li>ISAE 3402 type II&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-style-rounded-30 has-logex-blue-100-background-color has-background is-layout-flow wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--80)\">\n<h5 class=\"wp-block-heading has-logex-grey-0-color has-text-color has-link-color wp-elements-13\" id=\"block-18f76cca-de58-4a0a-85c9-efbda47cd403\">United Kingdom<\/h5>\n\n\n\n<ul class=\"has-margin-bottom-0 has-logex-blue-20-color has-text-color has-link-color wp-block-list wp-elements-14\">\n<li>Cyber Essentials&nbsp;<\/li>\n\n\n\n<li>Information Commissioner\u2019s Office&nbsp;registration&nbsp;<\/li>\n\n\n\n<li>NHS Data Security &amp; Protection&nbsp;Toolkit&nbsp;<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">All mentioned certifications contain an annual (external) audit and\/or annual re-certification requirement.<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-15\" id=\"Platform-Technology\">Platform &amp; Technology&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX delivers online healthcare analytics as Software-as-a-Service (SaaS), meaning that the entire LOGEX application runs online, unlike in the past when a local or client-side installation was required. Both our client\u2019s data and the calculations logic are deployed on our cloud infrastructure. Users of our customers can access the application on any computer with a web-browser (specifications are described below).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A SaaS platform allows us to scale our products without (linearly) increasing supporting resources, and it enables us to ensure all clients benefit from having access to the latest features and being provisioned with important maintenance and security updates without delay.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Hosting &amp; Infrastructure&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">We employ a so-called \u2018cloud-agnostic\u2019 architecture, meaning that our technology is built with minimal dependence on our cloud providers, thereby eliminating any potential vendor lock-in risk. This approach enables us to quickly migrate our products from one cloud provider to another, to ensure continuity of our business if it were ever at risk. As outlined in the next chapter, LOGEX products are hosted at different cloud providers in different countries, both at international and at local partners. We make use of different cloud providers in order to respect local privacy regulations, data residency requirements, and local sentiment. Where possible, we make use of&nbsp;proven vendor-supplied solutions for operational efficiency and security.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"703\" src=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/environments-1200x703.jpg\" alt=\"\" class=\"wp-image-1922\" srcset=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/environments-1200x703.jpg 1200w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/environments-600x352.jpg 600w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/environments-768x450.jpg 768w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/environments-1536x900.jpg 1536w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/environments.jpg 1920w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-60\"><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignwide is-style-rounded-60 has-logex-cream-30-background-color has-background is-layout-constrained wp-container-core-group-is-layout-de9efad5 wp-block-group-is-layout-constrained\" style=\"padding-top:6rem;padding-right:var(--wp--preset--spacing--50);padding-bottom:6rem;padding-left:var(--wp--preset--spacing--50)\">\n<h4 class=\"wp-block-heading\">Data Residency<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX stores customer data domestically. Therefore, data is stored in the following data centres:<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>The Netherlands<br><\/strong>Microsoft Azure EU-WEST<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>United Kingdom<br><\/strong>Microsoft Azure UK-SOUTH<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Sweden<\/strong><br>Local hosting provider (Elastx)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Finland<br><\/strong>Local hosting provider (Telia)<\/p>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX requires its infrastructure partners to be ISO 27001 certified and\/or make use of ISO 27001 certified data centres, to ensure continued security assurance throughout key elements of the LOGEX supply chain. Besides ensuring data is stored in well-protected data centres, from a logical perspective we ascertain that data never leaves the data centres as part of LOGEX\u2019s operations: LOGEX employees only have access to the data through a secure Remote Desktop connection to the data centre.<\/p>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-60\"><\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Network Segmentation<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Our network environments are logically and\/or physically separated, to ensure only those who need access to certain data or services actually have access. Think of the guest networks vs. authorised company networks in our offices, hosted enterprise services such as O365 vs. the LOGEX-hosted customer-facing applications, and the separation of development\/testing\/acceptance\/production environments for the LOGEX applications. By segmenting networks based on the relevant data assets, and controlling access to those environments, we make sure confidential information remains confidential.<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-96\"><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull has-logex-light-blue-20-background-color has-background is-layout-constrained wp-container-core-group-is-layout-656dc16b wp-block-group-is-layout-constrained\" style=\"padding-top:8rem;padding-right:var(--wp--preset--spacing--70);padding-bottom:8rem;padding-left:var(--wp--preset--spacing--70)\">\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-16\" id=\"Application-Requirements\">Application Requirements&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The LOGEX applications are accessible from any modern browser (Chrome and Microsoft Edge are preferred, Firefox support is best-effort) via HTTPS (no VPN is required). In terms of PC specifications, 8 GB RAM and 20 Mbit Internet speed are recommended, along with Windows 10 or 11 64-bit.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX applications function as so-called \u2018single-page\u2019 applications, where data is incrementally loaded in the browser, thereby creating a responsive user experience. Network connection speed and memory specifications will influence how quickly data is loaded to the browser, as likely a handsome amount of data will need to be loaded.&nbsp;<\/p>\n\n\n\n<p class=\"has-margin-bottom-0 wp-block-paragraph\">The LOGEX applications are designed for use on laptop\/PC. Use on tablet and mobile devices is not recommended, as LOGEX applications are not designed for touch interaction.<\/p>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-96\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-17\" id=\"Development-Process\">Development Process<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX has embraced the DevOps methodology for developing and operating its applications.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Since LOGEX products are often offered\/hosted in multiple countries, we develop our applications under the philosophy of \u201cdeveloping centrally, deploying locally\u201d. Our ever-growing software development team is located in our Solution Center in Brno, Czech Republic, consisting of \u2013 among others \u2013 backend developers, database developers, frontend developers, UX\/UI designers, system analysts, scrum masters and test automation specialists.&nbsp;<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"571\" src=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/dev_process-1200x571.jpg\" alt=\"\" class=\"wp-image-1928\" style=\"width:400px\" srcset=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/dev_process-1200x571.jpg 1200w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/dev_process-600x285.jpg 600w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/dev_process-768x365.jpg 768w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/dev_process-1536x730.jpg 1536w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/dev_process.jpg 1838w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX software is developed according to a software development lifecycle (SDLC), which means requirements and best practices are applied to the various stages software evolves through in its lifetime, safeguarded by quality gates all around. Any changes, new features, improvements or fixes are defined and created through our implementation of the Scrum methodology, where sprint cycles last 2 weeks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After development, applications are deployed in their respective local infrastructures for (acceptance) testing purposes and ultimately production roll-out.&nbsp;<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"530\" src=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/scrum-1200x530.jpg\" alt=\"\" class=\"wp-image-1932\" srcset=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/scrum-1200x530.jpg 1200w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/scrum-600x265.jpg 600w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/scrum-768x339.jpg 768w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/scrum-1536x678.jpg 1536w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/scrum.jpg 1920w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Change Management&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Changes of any kind to the LOGEX applications and infrastructure are managed and logged through a central documentation and ticketing platform (Atlassian). Along with the ability to review and approve changes (in code) before integrating them into production, the platform enables us to manage changes in a transparent and traceable manner.&nbsp;<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-18\" id=\"Security\">Security<strong>&nbsp;<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Information Security Management System (ISMS)&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX has designed and implemented an ISMS, which is the collection of responsibilities, objectives, policies, and technological and procedural security controls to effectively manage information security risks to our organisation. Our ISMS is managed centrally and covers all previously referenced legal entities. Our ISMS is designed, implemented, certified and annually audited according to the ISO 27001 and NEN 7510 standards.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Security Testing (Code Scanning, Vulnerability Scanning and Penetration Testing)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX applications and infrastructure are subjected to external penetration tests at least once a year. In addition to external security testing activities, LOGEX employs a security testing strategy which covers the entire software development lifecycle. We regularly test for (known) vulnerabilities and software weaknesses internally through the use of third-party or community-developed Static Code Analysis, Software Composition Analysis, and Vulnerability Scanning tools. Factoring these testing activities in our development process allows us to:&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-group is-style-rounded-30 has-logex-cream-30-background-color has-background is-layout-constrained wp-container-core-group-is-layout-f354cabe wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--80)\">\n<ul class=\"has-margin-bottom-0 wp-block-list\">\n<li>identify and eliminate software weaknesses introduced by coding errors at the time of coding self-developed software&nbsp;<\/li>\n\n\n\n<li>identify and eliminate known vulnerabilities introduced by third-party\/open-source software components that are integrated into LOGEX applications\/infrastructure&nbsp;<\/li>\n\n\n\n<li>identify and eliminate vulnerabilities on production systems&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Security Incident Response&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Security incidents are viewed as an opportunity to learn and improve our way of working. Therefore, LOGEX encourages employees to always report incidents, regardless of size of the incident, whether an employee caused or witnessed an incident, and regardless of whether a vulnerability has resulted in actual damage or not. LOGEX employees understand they all have an individual responsibility to protect the security of the organisation, and reporting (potential) incidents is a key element of this responsibility.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In case of a security incident and\/or data breach, an Incident Response Procedure is followed in order to manage and resolve the incident.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Incident reports and follow-ups are recorded centrally for evidencing, traceability and auditing purposes.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-group is-style-rounded-30 has-logex-cream-30-background-color has-background is-layout-constrained wp-container-core-group-is-layout-f354cabe wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--80);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--80)\">\n<h5 class=\"wp-block-heading\">The Procedure includes the following steps:&nbsp;<\/h5>\n\n\n\n<ul class=\"has-margin-bottom-0 wp-block-list\">\n<li>Identification and classification of the incident&nbsp;<\/li>\n\n\n\n<li>Damage control and incident investigation&nbsp;<\/li>\n\n\n\n<li>Remediation and recovery&nbsp;<\/li>\n\n\n\n<li>(Timely) Communication to affected parties, where needed&nbsp;<\/li>\n\n\n\n<li>Reporting and evaluation, including root cause analysis&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:30%\">\n<h4 class=\"wp-block-heading alignwide\">Encryption&nbsp;<\/h4>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-style-rounded-30 has-margin-bottom-20 has-logex-light-blue-20-background-color has-background is-vertical is-content-justification-left is-layout-flex wp-container-core-group-is-layout-2e22a96c wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--70);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--70)\">\n<p class=\"has-margin-bottom-0 wp-block-paragraph\">Communication with the LOGEX products is encrypted&nbsp;<em>in transit&nbsp;<\/em>using&nbsp;<em>TLS v1.2&nbsp;<\/em>and strong ciphers.&nbsp;<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-style-rounded-30 has-margin-bottom-20 has-logex-light-blue-20-background-color has-background is-vertical is-layout-flex wp-container-core-group-is-layout-3178331e wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--70);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--70)\">\n<p class=\"has-margin-bottom-0 wp-block-paragraph\">Data provided to the LOGEX products is encrypted&nbsp;<em>at rest&nbsp;<\/em>through disk encryption at the data centre, using&nbsp;<em>AES-256<\/em>.&nbsp;<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-style-rounded-30 has-logex-light-blue-20-background-color has-background is-vertical is-layout-flex wp-container-core-group-is-layout-3178331e wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--70);padding-right:var(--wp--preset--spacing--70);padding-bottom:var(--wp--preset--spacing--70);padding-left:var(--wp--preset--spacing--70)\">\n<p class=\"has-margin-bottom-0 wp-block-paragraph\">Additionally, passwords, which are managed through a managed ID platform (Auth0), are encrypted with the&nbsp;<em>bcrypt&nbsp;<\/em>algorithm to securely hash and salt the passwords.&nbsp;<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-60\"><\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Centralised Logging &amp; Monitoring&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX centrally logs events taking place within the different environments\/infrastructures where LOGEX products are deployed. Events such as user management actions (creating, modifying, deleting users), authentication attempts and user actions within systems are captured and monitored for anomalies and potential indicators of compromise.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"794\" src=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/security-1200x794.jpg\" alt=\"\" class=\"wp-image-1944\" srcset=\"https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/security-1200x794.jpg 1200w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/security-600x397.jpg 600w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/security-768x508.jpg 768w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/security-1536x1016.jpg 1536w, https:\/\/site.logex.com\/no\/wp-content\/uploads\/sites\/8\/2023\/12\/security.jpg 1920w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-96\"><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull has-logex-light-blue-20-background-color has-background is-layout-constrained wp-container-core-group-is-layout-656dc16b wp-block-group-is-layout-constrained\" style=\"padding-top:8rem;padding-right:var(--wp--preset--spacing--70);padding-bottom:8rem;padding-left:var(--wp--preset--spacing--70)\">\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-19\" id=\"Identity-Access-Management\">Identity &amp; Access Management<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">User Authentication (incl. brute-force and IP-throttling protection)&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Where possible, LOGEX encourages customers to use their own identity provider (e.g. Open ID Connect or SAML) as a means of customer user authentication. We also promote the use of Single Sign-On (SSO), so that users can seamlessly sign in to the LOGEX applications.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If a customer\u2019s identity provider cannot be integrated, LOGEX will issue dedicated user accounts for customer users, consisting of a username (typically the user\u2019s work email address) and password. Passwords are subjected to password length and complexity requirements, to ensure they are of sufficient strength. Users will be required to use multi-factor authentication (MFA) when signing in to the LOGEX application, meaning that besides the username and password a second authentication factor (e.g. through the Microsoft Authenticator app) is required.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The managed ID platform (Auth0) utilised by the LOGEX applications offers additional forms of account protection, including brute-force protection \u2013 which limits the amount of faulty passwords that can be entered sequentially \u2013 and protection from suspicious IP throttling \u2013 which will result in blocking of specific IP addresses that rapidly make a large number of login attempts.&nbsp;<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">User Authorisation&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">We make use of the so-called Role-Based Access Control (RBAC) authorisation model, where (groups of) users are assigned permissions to access resources&nbsp;based on their role in the organisation. This applies both to LOGEX internal users and client users. To ensure that such permissions are distributed and managed correctly, we perform regular reviews of such RBAC groups and adjust permissions where needed. Similarly, we periodically request clients to review their user base so that the client user base permissions remain accurate.&nbsp;<\/p>\n<\/div>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-36\"><\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-logex-blue-50-color has-text-color has-link-color wp-elements-20\" id=\"Availability-Back-ups\">Availability &amp; Back-ups<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Availability&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">LOGEX has recovery mechanisms in place to not only restore data, but also re-build its entire infrastructure. We have created all our infrastructure as code, which supports us to standardise infrastructure deployments across different locations and cloud providers, and therefore enables us to scale our SaaS solutions across countries. Following this Infrastructure-as-Code paradigm also allows us to re-deploy our solutions quickly at a different data centre in case of disaster recovery. Our Recovery Point and Recovery Time Objectives aim for minimal disruption to the availability of our solutions.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Back-ups&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">In order to support our and our customers\u2019 business continuity, we have implemented a complete back-up schedule where full back-ups of application databases are created every week, differential back-ups are created daily, and transaction logs are backed up every 15 minutes. Back-ups have a 4-week retention period. Regardless of the cloud service provider, we require back-ups to be stored in encrypted form (using AES-256).<\/p>\n\n\n\n<div class=\"acf-block-spacer\">\n  <div class=\"spacer has-height-96\"><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>LOGEX Security We earn trust by providing assurance This page outlines LOGEX&#8217;s internal processes for developing, maintaining, and securing its SaaS Financial Analytics solutions&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1909","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/pages\/1909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/comments?post=1909"}],"version-history":[{"count":77,"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/pages\/1909\/revisions"}],"predecessor-version":[{"id":2570,"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/pages\/1909\/revisions\/2570"}],"wp:attachment":[{"href":"https:\/\/site.logex.com\/no\/wp-json\/wp\/v2\/media?parent=1909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}