IP Protection and Data Security
Luxoft’s solid infrastructure creates a transparent and unified development environment across all delivery locations.
General Security
- Information security management system and information security policies are based on the ISO/IEC 27001:2005 (BS7799 Part 2:2002) security standard. Luxoft was certified on this standard in April, 2006 by Lloyd's Register Quality Assurance (LRQA)
- Reservation and failover configurations for critical points (servers, network switches, routers, firewalls)
- Strong procedures for maintaining access lists and passwords, including their expiration control and scheduled change
- Personnel access restrictions and procedure management
- Antiviral protection
- Change management
- Monitoring/logging of information access
- Monitoring of informational/network services availability
- Removable media controls
Network Security
- Full physical and logical segregation of information and service networks
- Cisco VLAN traffic separation
- Cisco PIX firewalls with IDS at all external entry points into the site
- Strong ACL policies
- Encryption of data feeds between Customer and Vendor using VPN or/and dedicated channels
- Unified center of LAN monitoring, managing and administering
Infrastructure
- Structured cable system (SCS) in all company buildings based on products of Legrand, Molex and Retall with optical uplinks
- CISCO active network equipment (Cisco 4500, 3500, 3700 series switches at core and distribution levels; Cisco 1700, 1800, 2600, 2800 series routers)
- Dynamic routing protocols (OSPF or EIGRP, depend on Customer requirements)
- 100/1000 Mbit switched Ethernet (Fast Ethernet, Gigabit Ethernet) and Fiber Optical LAN technology
- Dell Power Edge series servers are used as a standard of server hardware
- Scalability (minimum 2 times growth availability)
On-premises security
- Luxoft Development Centers are located in dedicated physically secured, customer-approved areas
- Security guards monitoring and 24x7 video surveillance
- Electronic motion sensors, mantrap controlled entrance and exit
- Security breach alarm, coded door locks and PIN cards
Disaster Recovery and Business Continuity
- Disaster recovery and business continuity plans could be developed and tested on customer request