Business Continuity

Infrastructure

A dedicated IT department is responsible for Infrastructure Engineering, Infrastructure Change and Release Management. Responsible people are informed about all significant events concerning the functioning of the information infrastructure on the 24x7 basis.

Computing Facilities

We have more than 50 Intel P4 (Core 2 Duo) and Apple Macintosh workstations and 3 servers in our two datacenters located in New Delhi, India. All our datacenters are equipped with efficient air conditioning, fire protection and UPS power protection systems. Each server is built on the RAID technology (Level 10 controllers are used). 2 servers are HP Blade servers and one is 2U tower based.

Internet Redundancy and Data Exchange

Reliable Internet connection is provided via independent data link with the bandwidth of 8 Mbps. Reliability of power supply is ensured by the presence of 1 separate and independent power feeder. Internal information infrastructure includes 20 HP ProCurve switches, 2 Cisco router, 1 Cisco Firewall.

Network Services Reliability

Influxive has 37 dedicated servers (all xeon servers 2.4 GHz) with Failover capabilities, such as Mail, DNS, Internet Access, Active Directory and development servers. All servers are located in Texas and in North America. This mechanism ensures that no incoming and outgoing mail is lost and no downtime occurs.

Security Management

We have developed a number of documents covering our Security Policy: General Network Usage Policy, Sensitive Information Encryption and Exchange Policies. General compliance with our security policy and regulations is ensured by the usage of logon scripts and Group Policies.

Staff Security

We perform careful security checks of every person that is applying for a job. Confidentiality Agreements are an important part of the security system and every employee we hire is to sign such an Agreement. All the security-related cases and incidents are tracked and resolved by Department Managers. We inform all the people we hire about the Company’s security standards and keep this knowledge up-to-date by organizing special training programs on regular basis.

Physical Security and Access Control

We imply a multi-level access control system. On the first level our security service is checking our employee’s ID-badges to ensure they are authorized to access the building. The next level of access control is based on the usage of electronic cards, each possessing unique radio metrics, that are given to every employee that is authorized to access the floors of our buildings. We have installed effective video monitoring and alert systems in our offices and have arranged Governmental Security Service’s (Police) protection of our property. The access control system is managed from one central control point, though each datacenter’s security system is independent.

Customers Data Protection

We understand that security of our client’s data in number one priority for our business. We use 256 bit AES algorithm for traffic encryption and 2048 bit public/private keys pair for authentication purposes. Sensitive data is exchanged via SFTP server and PGP is used for emails encryption. This way compliance with the ISO standards for information security is provided. We also strictly follow all the governmental rules and regulations for emergency issues.

Additional capacities

For development purposes we use virtualization technology which enables us to build a separate operational environment for each project and thus increase resource allocation flexibility and effectiveness.

Security Monitoring

All the processes are constantly monitored by the administrative team and vital information on all the important changes and incidents is tracked and logged via Syslog Server for future audit.

Backup Process and Disaster Recovery

Planning for business continuity is a comprehensive process that includes disaster recovery, business recovery, business resumption, and contingency planning as shown below.

As described above, Business Continuity Management is meant to have a very broad meaning and is often used as an all-encompassing term to describe an integrated and enterprise-wide process that should include the following in alphabetical order:

• accident prevention
• business impact analysis
• business recovery
• business resumption planning
• command centers
• computer security
• contingency planning
• crisis communication
• crisis management
• disaster recovery
• emergency management and response

• event management
• exercising and training
• information security
• mitigation planning
• project management and quality control
• risk control
• risk financing and insurance
• risk management
• safety and security
• software management

Business Continuity Management therefore, is a comprehensive process to ensure the continuation and improvement of business in the face of whatever challenges your firm may face. Continuity planning requires that these many processes be used together, to create a complete continuity plan. The plan must be maintained and updated as business processes change. Continuity plans must be tested.  Table top drills and functional exercises are generally used to make sure that to ensure that they will work.