By John Carbo, Director of Information Security
The SEC OCIE published a risk alert recently entitled “Safeguarding Customer Records and Information in Network Storage – Use of Third Party Security Features” which contains three main observations:
- Misconfigured network storage solutions.
- Inadequate oversight of vendor-provided network storage solutions.
- Insufficient data classification policies and procedures.
Our AbacusFLEX and AbacusFLEX-Hybrid platforms are designed to meet or exceed regulatory security requirements by following policies and procedures set forth by NIST, COBIT, ISO, Center for Internet Security and the Cloud Security Alliance.
Here is how Abacus addresses the OCIE Risk Alert’s observations: