DOCSLIB.ORG

Claranet | Compliance

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Claranet | Compliance Claranet | Compliance Informationssicherheit und Datenschutz Version: 1.7 Stand: 06.02.2018 Status: Final Klassifizierung: Intern Verantwortlich: CISO Claranet | Compliance Inhaltsverzeichnis 1. Unternehmensdarstellung ....................................................................................................... 5 2. Informationssicherheit und Datenschutz .............................................................................. 6 3. Organisational Security ........................................................................................................... 7 3.1. Sicherheits- und Notfallorganisation ................................................................................. 7 3.2. Das Modell geteilter Verantwortung ................................................................................. 9 3.2.1. Managed Cloud ........................................................................................................... 9 3.2.2. Managed Public Cloud (AWS, CGP, Azure) ............................................................. 10 3.3. Legal Compliance ........................................................................................................... 10 3.4. Informationsklassifizierung ............................................................................................. 11 3.4.1. Vertraulichkeit (Cn) .................................................................................................... 12 3.4.2. Datenschutz (Dn) ....................................................................................................... 13 3.4.3. Umgang mit klassifizierten Informationen und Datenträgern .................................... 13 3.4.4. Klassifizieren und Labeln von Informationen und Assets durch den Kunden ........... 15 3.5. Security Incident Management ....................................................................................... 15 3.5.1. Beweissicherung........................................................................................................ 16 3.6. Security Change Management ....................................................................................... 16 3.7. Administrator's operational security ................................................................................ 17 3.8. Vulnerability Management .............................................................................................. 17 3.9. Asset Management ......................................................................................................... 17 3.10. Capacity Management .................................................................................................... 17 3.11. Risk Management ........................................................................................................... 18 3.12. Business Impact Analyse ............................................................................................... 18 3.13. Security Reporting .......................................................................................................... 18 3.14. Audits und Notfalltests .................................................................................................... 19 3.15. Security Performance Evaluation ................................................................................... 19 3.16. Continual Service Improvement ..................................................................................... 19 3.17. Business Continuity und Notfallmanagement ................................................................. 20 4. Technical Security .................................................................................................................. 20 4.1. Security Configuration Management (Hardening) .......................................................... 20 4.2. Patch Management ........................................................................................................ 20 4.3. Backup und Restore ....................................................................................................... 20 Klassifizierung: Intern Version: 1.7 Status: Final Datum: 06.02.2018 Verantwortlich: CISO Seite: 2 von 34 Claranet | Compliance 4.4. Security Information und Event Management ................................................................ 21 4.4.1. Zeitsynchronisation .................................................................................................... 21 4.5. User registration and de-registration .............................................................................. 21 4.6. Privileged Access Management ..................................................................................... 22 4.6.1. Multi-Faktor-Authentifizierung .................................................................................... 23 4.7. Malware und Virus Protection......................................................................................... 24 4.8. Encryption ....................................................................................................................... 24 4.8.1. Cryptographic Platform Protection............................................................................. 26 4.9. Secure Engineering Principles ....................................................................................... 27 4.10. Network Security Management ...................................................................................... 27 4.10.1. DMZ ....................................................................................................................... 27 4.10.2. Firewall .................................................................................................................. 28 4.10.3. Web Acceleration & DoS Protection (WADP) ....................................................... 28 4.10.4. Web Application Firewall (WAF) ............................................................................ 28 4.10.5. Encrypted-MPLS.................................................................................................... 28 4.10.6. Vulnerability Scans ................................................................................................ 29 5. Physical, Environmental and Personnel Security .............................................................. 29 5.1. Niederlassungen und Rechenzentren ............................................................................ 29 5.1.1. Sicherheitszonenmodell ............................................................................................ 30 5.1.2. Office Hanauer Landstraße 184 / 196 ....................................................................... 31 5.1.3. Rechenzentren Claranet ............................................................................................ 31 5.1.4. Rechenzentren Interxion ........................................................................................... 32 5.1.5. Locations und Regions Public Cloud ......................................................................... 33 6. Konsequenzen eines Sicherheitsvorfalls ............................................................................ 33 7. Dokumentenmanagement ..................................................................................................... 34 Klassifizierung: Intern Version: 1.7 Status: Final Datum: 06.02.2018 Verantwortlich: CISO Seite: 3 von 34 Claranet | Compliance Tabellenverzeichnis Tabelle 1 - Definition der Vertraulichkeitsanforderungen ............................................................... 13 Tabelle 2 - Definition der Datenschutzanforderungen .................................................................... 13 Tabelle 3 - Speicherung von klassifizierten Informationswerten .................................................... 14 Tabelle 4 - Taggen und Labeln von Informationswerten ................................................................ 15 Tabelle 5 - Capacity Management ................................................................................................. 18 Tabelle 6 - An- und Abmeldung von Benutzern ............................................................................. 22 Tabelle 7 - Verwaltung von geheimen Authentifizierungsinformationen ........................................ 23 Tabelle 8 - Multi-Faktor-Authentifizierung ...................................................................................... 24 Tabelle 9 - Zulässige kryptographische Algorithmen ..................................................................... 26 Tabelle 10 - Cryptographic Platform Protection ............................................................................. 26 Tabelle 11 - Sicherheitszonen für sensitive Räume der Claranet .................................................. 31 Tabelle 12 - Dokumentenhistorie ................................................................................................... 34 Abbildungsverzeichnis Abbildung 1 - Organigramm der Sicherheitsorganisation ................................................................ 8 Abbildung 2 - Shared Responsibility der Managed Cloud ................................................................ 9 Abbildung 3 - Shared Responsibility der Managed Public Clouds ................................................. 10 Abbildung 4 - Niederlassungen der Claranet Gruppe .................................................................... 29 Abbildung 5 - Sicherheitszonenmodell der Claranet .....................................................................
Load more

Recommended publications
  • Public Cloud – Services & Solutions 2021
    2021 Public Cloud – Services & Solutions 2021 Copyright © 2019, Information Services Group, Inc. All Rights Reserved. 1 ISG (Information Services Group) (NASDAQ: III) is a leading global technology research and advisory firm. A trusted business partner to more than 700 clients, including 75 of the top 100 enterprises in the world, ISG is committed to helping corporations, public sector organizations, and service and technology providers achieve operational excellence and faster growth. The firm specializes in digital transformation services, including automation, cloud and data analytics; sourcing advisory; managed governance and risk services; network carrier services; technology strategy and operations design; change management; market intelligence and technology research and analysis. Founded in 2006 and based in Stamford, Conn., ISG employs more than 1,300 professionals operating in more than 20 countries — a global team known for its innovative thinking, market influence, deep industry and technology expertise, and world-class research and analytical capabilities based on the industry’s most comprehensive marketplace data. For more information, visit www.isg-one.com. © 2021, Information Services Group, Inc. All Rights Reserved. 2 Table of Contents Definition........................................................................................................................................4 Quadrants Research......................................................................................................................5 Quadrants
    [Show full text]
  • Riley Takes Helm As Muller Vacates
    Former soldier risked Horton’s obsession all on ambitious with business growth cloud mission p32 boosts FluidOne p34 VOL 23 ISSUE 2 JULY 2018 www.comms-dealer.com record | report | integrate oak.co.uk/integration PCI DSS payment automation oak.co.uk record | report | integrate ADVERTISEMENT ADVERTISEMENT THE HEARTBEAT OF THE UK COMMS INDUSTRY powering your potential 020 8614 9090 The experts in telecom billing & provisioning solutions unionstreet.uk.com Comms Dealer 3-16 Industry News Catch up with July 2018 events in comms 18 Interview Glide spreads its Click to open channel wings channeltelecom.com 22 Riley takes helm Business Matters Comms sector puts in vintage quarter as Muller vacates 24 DAISY CEO Neil Muller’s exit sees Chairman Matt Riley (pictured) revert to a Market Review THE COMMS NATIONAL hands-on leadership role and signals a planned refinancing of Group debt. Comms industry AWARDS 2018 poised for AI-fest CNAWARDS.COM SPECIAL REPORT autumn suggests that the sale with guidance for next year of process has ended with signifi- over £700m and £140m. In February Daisy outlined big cant implications for UK tele- Last month Daisy also acq- 30 plans to double in size within coms M&A,” said Carse. uired Voice Mobile and DV02, five years by taking advantage “Riley has decided to step adding around £15m revenues Business Profile of a potential ‘wave of con- back into the breach, aided by and £2.2m EBITDA. Simon Woodhead: solidation’ in the industry as it potential significant annual cost Muller, the former Computa- A force for good sought a circa £1bn sale to pri- savings from a refinancing off center UK MD, joined Daisy in vate equity or a trade buyer.
    [Show full text]
  • Serviços De Telecomunicações (Basic)
    Estudo Sectores Portugal basic da DBK Serviços de Telecomunicações (Janeiro 2021 – 10ª edição) Objeto do estudo No estudo analisa-se a estrutura da oferta, a evolução recente, as previsões e a situação económico-financeira do setor, assim como o posicionamento e os resultados das 40 principais empresas que operam no mesmo. Principais conteúdos Evolução recente da faturação, do número de clientes e do tráfego Distribuição da faturação e do número de clientes por tipo de serviço: serviço telefónico móvel, serviço telefónico fixo, acesso à internet, televisão por cabo, outros Estrutura da oferta: número de empresas, distribuição por tamanhos, evolução do número de empregados, grau de concentração Balanço, demonstração de resultados e rácios económico-financeiros agregados das principais empresas Previsões da evolução do mercado Acionistas e número de empregados das principais empresas Sucursais e sociedades participadas pelas principais empresas Evolução da faturação das principais empresas Indicadores de internacionalização das principais empresas Quotas de mercado das principais empresas Resultados financeiros individuais das principais empresas: balanço, demonstração de resultados, rácios económico-financeiros Empresas analisadas AR Telecom Dstelecom Alentejo e Algarve Lazer Onitelecom AT&T Dstelecom Norte Lycamobile Orange B-Connected Emacom MEO Rentelecom Blu Fibroglobal MOG Repart BT G9 Moneycall Tata Communications Claranet Go4mobility Narrownet Telefónica IWS Cogent Gocontact NOS T-Systems Colt Hoist Group NOS Açores Verizon Derivadas e Segmentos iBasis NOS Madeira Vodafone Dstelecom IP Telecom NOWO VOIP-IT Principais indicadores do setor Dados de síntese, 2019 A pandemia da covid-19 favorece o crescimento da procura ✓ Número de empresas, junho 2020 102 O volume de negócios das empresas do setor de serviços de ✓ Número de empregados 9.792 telecomunicações retomou em 2019, situando-se em 6.025 milhões de euros, valor que representou um crescimento em relação ao ano ✓ Faturação (milhões de euros) 6.025 anterior de 3,3%.
    [Show full text]
  • Next-Gen Private/Hybrid Cloud – Data Center Services & Solutions
    2021 Next-Gen Private/Hybrid Cloud – Data Center Services & Solutions 2021 Copyright © 2019, Information Services Group, Inc. All Rights Reserved. 1 ISG (Information Services Group) (NASDAQ: III) is a leading global technology research and advisory firm. A trusted business partner to more than 700 clients, including 75 of the top 100 enterprises in the world, ISG is committed to helping corporations, public sector organizations, and service and technology providers achieve operational excellence and faster growth. The firm specializes in digital transformation services, including automation, cloud and data analytics; sourcing advisory; managed governance and risk services; network carrier services; technology strategy and operations design; change management; market intelligence and technology research and analysis. Founded in 2006 and based in Stamford, Conn., ISG employs more than 1,300 professionals operating in more than 20 countries — a global team known for its innovative thinking, market influence, deep industry and technology expertise, and world-class research and analytical capabilities based on the industry’s most comprehensive marketplace data. For more information, visit www.isg-one.com. © 2021, Information Services Group, Inc. All Rights Reserved. 2 Table of Contents Definition ........................................................................................................................................ 4 Quadrants Research .....................................................................................................................
    [Show full text]
  • Initial Market Analysis Paper
    Ipsos MORI | Initial Market Analysis 1 December 2020 Initial market analysis paper Ipsos MORI Ipsos MORI | Initial Market Analysis 2 18-101398-01 | Final Version | This work was carried out in accordance with the requirements of the international quality standard for Market Research, ISO 20252, and with the Ipsos MORI Terms and Conditions which can be found at http://www.ipsos-mori.com/terms. © Department for Digital, Culture, Media and Sport 2020 Ipsos MORI | Initial Market Analysis 3 Contents 1 State aid market analysis ...................................................................................................... 4 1.1 Key terms and acronyms ......................................................................................................... 4 2 Has the aid had a material effect on the market position of the direct beneficiaries? .... 6 2.1 Key findings .............................................................................................................................. 6 2.2 Methodological approach ......................................................................................................... 7 2.3 All broadband provision ........................................................................................................... 9 2.4 NGA market ............................................................................................................................. 13 3 Is there evidence of changes to parameters of competition arising from the aid? ....... 19 3.1 Key findings ...........................................................................................................................
    [Show full text]
  • Magic Quadrant for Managed Hybrid Cloud Hosting, Europe Published: 28 June 2016
    G00281846 Magic Quadrant for Managed Hybrid Cloud Hosting, Europe Published: 28 June 2016 Analyst(s): Tiny Haynes, Gianluca Tramacere, Gregor Petri Infrastructure hosting services are evolving, both to include hyperscale cloud providers and within providers' own data centers in Europe to meet demands of data sovereignty and more agile computing. Infrastructure managers must choose vendor partners for optimal service for their requirements. Market Definition/Description The European marketplace consists of 28 member states of the European Union. Each member state has its own interpretation of the EU rules on data privacy, as well as separate languages and cultures. The scope of this Magic Quadrant focuses primarily on the European marketplace, incorporating the top six countries by GDP (Germany, the U.K., France, Italy, Spain and the Netherlands). In each of these countries, customers prefer — or sometimes stipulate — their languages to be supported, as well as service providers to have a data center presence in their countries to address data sovereignty concerns. Some providers in this Magic Quadrant take the approach of having data centers in each of the major hubs within Western Europe, while others prefer a more decentralized, global delivery approach; although this trend is becoming less frequent as larger providers seek to attract Pan-European and global businesses. This Magic Quadrant focuses on multinational as well as domestic service providers that have achieved a significant market share in one or more European countries. Gartner defines managed hybrid cloud hosting as a standardized, productized hosting offering that combines a cloud-enabled system infrastructure (CESI) platform — consisting of a pool of compute, network and storage hardware — and cloud infrastructure framework software to facilitate self- service and rapid provisioning.
    [Show full text]
  • Cloud Computing 2021 Cloud Computing 2021
    Cloud Computing 2021 Cloud Computing 2021 Contributing editor Marcus Pearl © Law Business Research 2020 Publisher Tom Barnes [email protected] Subscriptions Claire Bagnall Cloud Computing [email protected] Senior business development manager Adam Sargent 2021 [email protected] Published by Law Business Research Ltd Contributing editor Meridian House, 34-35 Farringdon Street London, EC4A 4HL, UK Marcus Pearl The information provided in this publication Bryan Cave Leighton Paisner LLP is general and may not apply in a specific situation. Legal advice should always be sought before taking any legal action based on the information provided. This information is not intended to create, nor does receipt of it constitute, a lawyer– Lexology Getting The Deal Through is delighted to publish the fourth edition of Cloud Computing, client relationship. The publishers and which is available in print and online at www.lexology.com/gtdt. authors accept no responsibility for any Lexology Getting The Deal Through provides international expert analysis in key areas of acts or omissions contained herein. The law, practice and regulation for corporate counsel, cross-border legal practitioners, and company information provided was verified between directors and officers. September and October 2020. Be advised Throughout this edition, and following the unique Lexology Getting The Deal Through format, that this is a developing area. the same key questions are answered by leading practitioners in each of the jurisdictions featured. Lexology Getting The Deal Through titles are published annually in print. Please ensure you © Law Business Research Ltd 2020 are referring to the latest edition or to the online version at www.lexology.com/gtdt.
    [Show full text]
  • Public Cloud – Solutions & Services 2020
    2020 Public Cloud – Solutions & Services 2020 Copyright © 2019, Information Services Group, Inc. All Rights Reserved. 1 A ISG (Information Services Group) (NASDAQ: III) é uma empresa líder global em consultoria e pesquisa em tecnologia. Parceiro de negócios confiável para mais de 700 clientes, incluindo 75 das 100 maiores empresas do mundo, a ISG está comprometida em ajudar empresas, organizações do setor público e provedores de serviços e tecnologia, a alcançar excelência operacional e crescimento mais rápido. A empresa é especializada em serviços de transformação digital, incluindo automação, nuvem e análise de dados; assessoria aos departamentos de compras; governança gerenciada e serviços de análise de risco; serviços de análise das operadoras de redes de comunicação; desenho da estratégia e operações; gestão da mudança; inteligência de mercado e pesquisa e análise da tecnologia. Fundada em 2006 e com sede em Stamford, Connecticut, a ISG emprega mais de 1.300 profissionais prontos para o digital, operando em mais de 20 países - uma equipe global conhecida por seu pensamento inovador, influência no mercado, profunda experiência em tecnologia e nas áreas verticais de negócio, capacidade em pesquisa e análise de classe mundial baseados nos dados de mercado mais abrangentes de cada setor. © 2020, Information Services Group, Inc. All Rights Reserved. 2 Table of Contents Definição ......................................................................................................................................... 4 Pesquisa por Quadrantes
    [Show full text]
  • Broadband for All Between Best Buys and Their Nearest Rivals
    CUSTOMER SERVICES * Percentage of survey respondents who do each activity weekly survey, only two internet service providers (ISPs) made the grade. Our research found a big gap Broadband for all between Best Buys and their nearest rivals. Waitrose scored 68% – a drop With broadband expected to be available to the whole UK of nearly 10% from its September by 2012, Which? reveals the Best Buy service providers 2008 rating. Plusnet (68%) and Greenbee (67%) join it as runners up. We found that the UK’s four biggest an’t get broadband because the whole UK, as part of its plans for a ISPs don’t impress. BT, TalkTalk and of where you live? Or maybe Digital Britain (see opposite). Virgin Media all hover around the you have broadband, but it’s 50% mark, while Tiscali languishes as Cso slow you might as well be Pick a broadband winner a Which? Don’t Buy, scoring 39%. using two cans and a length of string? If you can get broadband but are frus- Check how your ISP did using our If, like many Which? members, you trated by poor service and reliability, Best Buy and Don’t Buy summaries want to take part in a wide range of don’t despair. Our latest survey reveals plus our full results table on p63. If web activities, such as watching video four Best Buy home broadband you’re looking for mobile broadband, clips and downloading software, a providers – Zen Internet, O2, Utility you’ll find the results of our survey at below-par internet speed can make Warehouse and Be.
    [Show full text]
  • BOE 034 De 08/02/2008 Sec 3 Pag 7107 a 7134
    BOE núm. 34 Viernes 8 febrero 2008 7107 2239 RESOLUCIÓN de 11 de enero de 2008, de la Comisión del explotado una red pública de comunicaciones electrónicas o haya pres- Mercado de las Telecomunicaciones, por la que se publica tado servicios de comunicaciones electrónicas a terceros. En estos la Resolución de fecha 29 de noviembre de 2007, mediante supuestos, el operador deberá presentar en esta Comisión, debidamente la que se aprecia el coste neto del servicio universal incu- cumplimentado, el formulario que se contempla en el anexo II, y aportar rrido por Telefónica de España, Sociedad Anónima Uni- la declaración de veracidad recogida en el anexo III. personal, y se procede a la puesta en marcha del meca- Sexto.–Asimismo, el artículo 47.3 del Reglamento del Servicio Univer- nismo de financiación para compartir el referido coste en sal, en el que se atribuye a la Comisión del Mercado de las Telecomunica- relación con los ejercicios 2003, 2004 y 2005. ciones la competencia para «exonerar a determinados operadores de la obligación de contribuir a la financiación del servicio universal cuando su volumen de negocios a escala nacional se sitúe por debajo de un umbral Primero.–Mediante Resolución del Consejo de la Comisión del Mer- preestablecido por ella. La declaración de exención sólo tendrá efecto cado de las Telecomunicaciones, de fecha 29 de noviembre de 2007, se para el período que en ella se especifique, y el operador al que afecte apreció el coste neto del servicio universal incurrido por Telefónica de deberá asumir la obligación de contribución al Fondo nacional de finan- España, Sociedad Anónima Unipersonal, en los ejercicios 2003, 2004 y 2005, ciación del servicio universal una vez transcurrido, salvo que la Comisión descrito en la siguiente tabla (cifras en millones de euros): del Mercado de las Telecomunicaciones expresamente lo prorrogue».
    [Show full text]
  • Hosting and Managed Services Update
    HOSTING AND MANAGED SERVICES | Q3 2018 Investment banking services are provided by Harris Williams LLC, a registered broker-dealer and member of FINRA and SIPC, and Harris Williams Ltd, which is private limited company incorporated under English law with its registered office at 5th Floor, 6 St. Andrew Street, London EC4A 3AE, UK, registered with the Registrar of Companies for England and Wales (registration number 07078852). Harris Williams Ltd is authorized and regulated by the Financial Conduct Authority. Harris Williams is a trade name under which Harris Williams LLC and Harris Williams Ltd conduct business. HOSTING AND MANAGED SERVICES SECTOR REVIEW | Q3 2018 HARRIS WILLIAMS (“HW”) AS A FIRM TECHNOLOGY, MEDIA & TELECOM (“TMT”) GROUP • 300+ professionals across eight offices globally • 30+ professionals across Boston, San Francisco, and London • 140+ closed transactions in the last 24 months • 47+ closed transactions in the last 24 months • 20th record year in 2017 • 98% of revenue is from sell-side M&A advisory • Education Technology • Manufacturing Technology • 10 industry groups • Fintech • Membership Management • Healthcare IT • Public Sector Software • Hosting and Managed Services • Supply Chain, Transportation & Logistics • Human Capital Management • Infrastructure and Security Software • Internet & Digital Media MARKET COMMENTARY • Significant consolidation and investment activity across managed hosting and services with more than ten significant transactions in the past 6 months • Market opportunity continues to be significant
    [Show full text]
  • Exponential-E Continues to Demonstrate Deft Style with SD-WAN Cloudnet Initiative
    Exponential-e Continues to Demonstrate Deft Style with SD-WAN Cloudnet Initiative REPORT Quick Take Event Ratings Competitive Impact BT Perspective Capita Colt Daisy Resonse Vendor Fujitsu UK Intensity Importance Interoute Competitors O2 UK Talk Talk Business Virgin Media Business Market Innovation Vodafone uK impact low high Impact Competitive Positives Competitive Concerns • If Exponential-e goes live as scheduled at the end of Q1, it will gain • Exponential-e’s SD-WAN solution is not presently available to customers a significant ‘earlymover’ advantage over most network operator rivals and is not yetat a customer trial phase. in the UK. • Selling SD-WAN will rely on proven use cases and it will be some time • Exponential-e’s customer base primarily utilise layer 2 services beforeExponential-e is able to deliver customer case studies to validate and control their ownrouting tables – these customers are likely its solution. to value SD-WAN self-management features. • No major vendor has emerged as clear long-term SD-WAN technology • Exponential-e has a long-standing partnership with Nuage and its core winner to date,so Exponential-e assumes some risk with any choice, network ispowered in large part by Nokia technology. even Nuage. • SD-WAN will allow Exponential-e to compete more aggressively on price throughincreased usage of Internet connectivity over MPLS. • SD-WAN will allow Exponential-e to deliver application performance features similar tothose offered by vendors such as Riverbed – but at a price point that is more accessible to mid-market customers. • Exponential-e will support SD-WAN connectivity over multiple access technologies atlaunch, including broadband, FTTC, and 4G.
    [Show full text]