{"id":314782,"date":"2018-02-13T15:44:46","date_gmt":"2018-02-13T23:44:46","guid":{"rendered":"https:\/\/bookafy.com\/confidentialitate-si-securitate\/"},"modified":"2023-03-20T15:27:52","modified_gmt":"2023-03-20T22:27:52","slug":"confidentialitate-si-securitate","status":"publish","type":"page","link":"https:\/\/bookafy.com\/ro\/confidentialitate-si-securitate\/","title":{"rendered":"Confiden\u021bialitate \u0219i securitate"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Securitatea \u0219i confiden\u021bialitatea Bookafy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Folosi\u021bi Bookafy cu \u00eencredere \u0219i al\u0103tura\u021bi-v\u0103 celor peste 15.000 de afaceri din \u00eentreaga lume care au \u00eencredere \u00een Bookafy. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"|\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"|\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tCalendare conectate\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Atunci c\u00e2nd este conectat la o aplica\u021bie ter\u021b\u0103 parte (icloud, google cal, outlook, exchange), Bookafy import\u0103 doar subiectul calendarului, data, ora \u0219i durata, pentru a bloca timpul \u00een Bookafy \u0219i a preveni rezerv\u0103rile duble. Nu import\u0103m, nu stoc\u0103m \u0219i nu p\u0103str\u0103m nicio informa\u021bie personal\u0103 sau identificabil\u0103. <\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tEmail \u0219i contacte\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy nu acceseaz\u0103 nicio informa\u021bie din calendarul dvs. conectat sau din contul de e-mail, inclusiv contacte, adrese de e-mail sau e-mailuri. Adresele de e-mail pot fi folosite pentru a autentifica proprietatea contului \u00een Bookafy, dar nu colect\u0103m nicio informa\u021bie legat\u0103 de datele dumneavoastr\u0103 personale. <\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tIntegr\u0103ri\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Toate integr\u0103rile cu ter\u021be p\u0103r\u021bi se fac prin autentificarea Oath. Acest lucru permite Bookafy s\u0103 se conecteze cu furnizorii ter\u021bi f\u0103r\u0103 a vedea, colecta sau stoca numele de utilizator sau parolele dumneavoastr\u0103. Bookafy este conectat prin intermediul unui cod de autentificare care este furnizat atunci c\u00e2nd v\u0103 conecta\u021bi prin Oath. <\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

G\u0103zduire de date<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Azure<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy este g\u0103zduit pe Azure. Pute\u021bi citi despre prevederile de securitate am\u0103nun\u021bite ale Azure \u0219i AWS pe site-ul acestora.<\/p>\n

Bookafy valorific\u0103 toate caracteristicile de securitate, confiden\u021bialitate \u0219i redundan\u021b\u0103 integrate \u00een platform\u0103. Azure \u00ee\u0219i monitorizeaz\u0103 \u00een permanen\u021b\u0103 centrele de date \u00een ceea ce prive\u0219te riscurile \u0219i se supune unor evalu\u0103ri pentru a asigura conformitatea cu standardele industriei. Opera\u021biunile centrelor de date Azure au fost acreditate sub: ISO 27001, SOC 1 \u0219i SOC 2\/SSAE 16\/ISAE 3402 (anterior SAS 70 Tip II), PCI Nivel 1, FISMA Moderat \u0219i Sarbanes-Oxley (SOX).<\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

AWS<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy utilizeaz\u0103 AWS CDN pentru imagini. Bookafy valorific\u0103 toate caracteristicile de securitate, confiden\u021bialitate \u0219i redundan\u021b\u0103 integrate \u00een platform\u0103. AWS \u00ee\u0219i monitorizeaz\u0103 \u00een permanen\u021b\u0103 centrele de date \u00een ceea ce prive\u0219te riscurile \u0219i se supune unor evalu\u0103ri pentru a asigura conformitatea cu standardele din industrie. Opera\u021biunile centrelor de date ale AW au fost acreditate conform: ISO 27001, SOC 1 \u0219i SOC 2\/SSAE 16\/ISAE 3402 (anterior SAS 70 Tip II), PCI Nivel 1, FISMA Moderat \u0219i Sarbanes-Oxley (SOX).<\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Copii de rezerv\u0103<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy face zilnic copii de siguran\u021b\u0103 ale tuturor datelor \u0219i codurilor de baz\u0103 pe servere redundante \u00een 2 loca\u021bii geografice separate. De asemenea, copiile de rezerv\u0103 ale codului \u0219i datelor sunt g\u0103zduite pe Dropbox Cloud Storage. <\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Criptare<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Datele care trec prin Bookafy sunt criptate, at\u00e2t \u00een tranzit, c\u00e2t \u0219i \u00een repaus. Toate conexiunile de la browser la platforma Bookafy sunt criptate \u00een tranzit folosind TLS SHA-256 cu RSA Encryption. Bookafy necesit\u0103 HTTPS pentru toate serviciile.<\/p>\n

Pentru datele sensibile, pentru care nu este nevoie de valorile originale, cum ar fi propriile parole, folosim algoritmul BCrypt pentru a le hash-ui. \u00cen cazul \u00een care sunt necesare valorile originale, cum ar fi detaliile de autentificare pentru accesarea calendarelor, valorile sunt criptate cu ajutorul algoritmului AES-256-GCM, folosind o sare unic\u0103, generat\u0103 aleatoriu pentru fiecare set de date sensibile.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Transfer securizat c\u0103tre servere<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy a angajat un serviciu de securitate a datelor pentru a autentifica transferurile de date \u00eentre echipa noastr\u0103 de dezvoltare \u0219i ma\u0219inile virtuale. Toate datele sunt criptate \u0219i securizate. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Partajarea datelor \u0219i accesul ter\u021bilor<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy nu vinde datele clien\u021bilor nim\u0103nui. Nu partaj\u0103m date \u00een scopuri de marketing \u00eentre canale. Bookafy nu acord\u0103 acces la niciun furnizor ter\u021b dec\u00e2t prin conectarea contului prin autentificarea Oath sau prin cheia API. Ambele pot fi deconectate \u00een orice moment din Bookafy sau dintr-o aplica\u021bie ter\u021b\u0103 parte. \u00cen rest, nu exist\u0103 p\u0103r\u021bi ter\u021be c\u0103rora s\u0103 li se dea date, s\u0103 li se v\u00e2nd\u0103 date sau s\u0103 li se comunice date din orice motiv. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Personal<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Verific\u0103ri de fond<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To\u021bi angaja\u021bii Bookafy trec printr-o verificare am\u0103nun\u021bit\u0103 a antecedentelor \u00eenainte de angajare.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Formare<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

De\u0219i p\u0103str\u0103m o cantitate minim\u0103 de date ale clien\u021bilor \u0219i limit\u0103m accesul intern pe baza principiului “nevoia de a cunoa\u0219te”, to\u021bi angaja\u021bii sunt instrui\u021bi \u00een domeniul securit\u0103\u021bii \u0219i al manipul\u0103rii datelor pentru a ne asigura c\u0103 respect\u0103 angajamentul nostru strict fa\u021b\u0103 de confiden\u021bialitatea \u0219i securitatea datelor dumneavoastr\u0103.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Confiden\u021bialitate<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To\u021bi angaja\u021bii au semnat un acord de confiden\u021bialitate \u0219i un acord de confiden\u021bialitate \u00eenainte de angajare.<\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Accesul la date<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Numai angaja\u021bii autoriza\u021bi au acces la infrastructura noastr\u0103 de produc\u021bie, iar utilizarea managerilor de parole pentru a asigura parole puternice \u0219i autorizarea cu doi factori, atunci c\u00e2nd este disponibil\u0103, este obligatorie \u00een \u00eentreaga companie.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Fiabilitate<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Dezastru<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Avem planuri de continuitate a afacerii \u0219i de recuperare \u00een caz de dezastru, care replic\u0103 baza noastr\u0103 de date \u0219i face copii de rezerv\u0103 ale datelor pe mai multe servere cloud din diferite zone geografice \u0219i centre de date pentru a asigura o disponibilitate ridicat\u0103 \u00een cazul unui dezastru.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Fiabilitate<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy are un istoric de uptime de 99.3%.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cicluri de dezvoltare<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Caracteristici noi<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy dezvolt\u0103 noi caracteristici \u00een sprinturi de 3 s\u0103pt\u0103m\u00e2ni. Implement\u0103rile noastre \u00eencep pe un server de dezvoltare, apoi pe un server de preg\u0103tire, apoi pe un server live. Desf\u0103\u0219urarea serverului live are loc duminic\u0103 diminea\u021ba, ora Rom\u00e2niei. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Asigurarea calit\u0103\u021bii \u0219i testarea<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy execut\u0103 teste automatizate \u00eempreun\u0103 cu teste manuale \u00eenainte de fiecare implementare. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Dev \u0219i Staging Server QA<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u00cenainte ca Bookafy s\u0103 fie lansat pe serverele live, codul este implementat pe serverele de preg\u0103tire \u0219i de dezvoltare \u00een timpul procesului de control al calit\u0103\u021bii. Odat\u0103 ce testarea este finalizat\u0103, codul este ad\u0103ugat la un depozit pentru implementarea serverului \u00een timp real, \u00een cadrul calendarului ciclului de sprint. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Monitorizare live<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Odat\u0103 ce codul este lansat pe serverul nostru de produc\u021bie, echipa noastr\u0103 de asigurare a calit\u0103\u021bii execut\u0103 teste automate, teste manuale \u0219i utilizeaz\u0103 software extern pentru a monitoriza serviciile noastre. Software-ul extern func\u021bioneaz\u0103 24 de ore din 24, 7 zile din 7, cu alerte care sunt trimise automat echipei noastre de dezvoltare \u00een cazul \u00een care apar probleme. Aceste alerte sunt monitorizate 24 de ore din 24, 7 zile din 7 \u0219i sunt trimise prin mesaj text \u0219i e-mail c\u0103tre echipa noastr\u0103. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Vulnerabilitate<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Firewall<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Bookafy este g\u0103zduit pe serverele Azure \u0219i utilizeaz\u0103 Azures Next Generation Firewall Service, care se afl\u0103 \u00een spatele serviciului Azures Web Application Gateway. Acest serviciu include protec\u021bie \u00eempotriva unor elemente precum injec\u021biile SQL sau cererile HTTP malformate.<\/span><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Prevenirea programelor malware \u0219i a viru\u0219ilor<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To\u021bi angaja\u021bii no\u0219tri lucreaz\u0103 de pe ma\u0219ini de\u021binute de companie, pe care ruleaz\u0103 software anti-malware \u0219i de protec\u021bie \u00eempotriva viru\u0219ilor. Serverul biroului nostru este protejat de un firewall pentru protec\u021bia \u00eempotriva penetr\u0103rii externe. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Scanare<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Serverele noastre interne, ma\u0219inile angaja\u021bilor \u0219i sistemele de g\u0103zduire a datelor ruleaz\u0103 \u00een permanen\u021b\u0103 programe de scanare a vulnerabilit\u0103\u021bilor. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Securitatea aplica\u021biilor<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Protec\u021bia creden\u021bialelor de autentificare<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Pentru aplica\u021biile noastre externe care lucreaz\u0103 cu Bookafy, Bookafy nu stocheaz\u0103\/colecteaz\u0103 parole. Toate autentific\u0103rile Bookafy utilizeaz\u0103 o conexiune sigur\u0103 Oath pentru a acorda acces la Bookafy, cu un token securizat utilizat pentru fiecare cont de utilizator individual. Printre exemple se num\u0103r\u0103: Zoom, Stripe, Authorize.net, Google calendar, Exchange, Office365, Outlook.com, Icloud, mailchimp \u0219i multe altele. Toate partea a 3-a<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Deconectarea<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Atunci c\u00e2nd un cont este anulat sau redus la gratuit, toate conexiunile Oath sunt deconectate automat de la Bookafy la aplica\u021biile dvs. ter\u021be. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Acces API<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Tot accesul la date prin intermediul Bookafy este aprobat \u00een mod explicit printr-un mecanism de autorizare OAuth, care acord\u0103 token-uri de acces care pot fi revocate \u00een orice moment.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Certific\u0103ri<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

GDPR<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Am \u00eencorporat standardele GDPR \u00een practicile de date pentru a ne asigura c\u0103 to\u021bi clien\u021bii no\u0219tri sunt sus\u021binu\u021bi \u0219i \u00een conformitate cu GDPR. Afla\u021bi mai multe despre
\n Bookafy GDPR<\/span>
\n<\/a>.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>\n

\u00centreb\u0103ri frecvente privind securitatea <\/b><\/p>\n

<\/p>\n

Au avut loc \u00eenc\u0103lc\u0103ri sau incidente de securitate semnificative \u00een ultimii 5 ani?<\/b><\/p>\n

Nu.<\/p>\n

<\/p>\n

Este accesul la conturile privilegiate \u0219i la conturile generice strict controlat \u0219i revizuit periodic, cel pu\u021bin<\/b><\/p>\n

anual?<\/b><\/p>\n

Da.<\/p>

Ce date sunt colectate despre utilizator? <\/b><\/p>

Software-ul colecteaz\u0103 date despre proprietarul contului \u0219i despre clientul final. Ambele seturi de date se bazeaz\u0103 pe datele furnizate de proprietarul contului \u0219i de clientul final. Nu colect\u0103m alte date \u00een afara celor oferite voluntar de c\u0103tre utilizatorul final sau proprietarul contului. <\/p>

Proprietarul contului poate crea c\u00e2mpuri de text pentru a colecta diferite puncte de date \u00een momentul rezerv\u0103rii, dar clientul este pe deplin con\u0219tient de datele colectate, deoarece utilizatorul final va tasta datele \u00een c\u00e2mpuri. Utilizatorul final sau proprietarul contului poate solicita \u0219tergerea datelor \u00een orice moment, trimi\u021b\u00e2nd un e-mail la data@bookafy.com. <\/p>

\u00cen ce scopuri utilizeaz\u0103 aplica\u021bia datele?<\/b><\/p>

Datele aplica\u021biei sunt utilizate doar pentru tranzac\u021bia pentru care clientul final s-a \u00eenscris. \u00cen cazul \u00een care utiliza\u021bi o aplica\u021bie ter\u021b\u0103 pentru a v\u0103 conecta cu SSO, cum ar fi Facebook sau Google, utiliz\u0103m conexiunea respectiv\u0103 doar pentru accesarea contului. Nu folosim datele din cont, cum ar fi contactele, evenimentele, mesajele de e-mail \u0219i nu post\u0103m \u00een numele dvs. \u0219i nu particip\u0103m la nicio activitate din contul dvs. Acesta este utilizat doar pentru conectare. <\/p>

Care sunt drepturile utilizatorilor de \u0219tergere a datelor \u0219i cum poate utilizatorul s\u0103 solicite \u0219tergerea datelor? <\/b><\/p>

Utiliz\u0103m datele colectate de la proprietarul contului (clientul nostru) pentru a oferi o experien\u021b\u0103 mai bun\u0103 proprietarului contului. Aceasta include orice loc \u00een care AO a fost blocat, a fost vizitat de mai multe ori, ar putea avea \u00eentreb\u0103ri sau un bug. Utiliz\u0103m aceste date pentru a comunica cu clien\u021bii no\u0219tri (proprietarul contului) la momentul potrivit, cu mesajul potrivit. <\/p>

Pentru utilizatorul final, clientul clientului nostru… folosim aceste date doar \u00een scopul tranzac\u021biei (rezerv\u0103rii) cu proprietarul contului. Nu comercializ\u0103m ace\u0219ti clien\u021bi \u0219i nu folosim datele lor \u00een niciun alt mod. Datele lor nu sunt v\u00e2ndute sau \u00eemprumutate… ele r\u0103m\u00e2n \u00een sistemul nostru. 

At\u00e2t \u00een cazul AO, c\u00e2t \u0219i \u00een cazul clientului final, datele lor pot fi \u0219terse \u00een orice moment. AO poate trimite un e-mail la data@bookafy.com \u0219i poate solicita ca contul \u0219i datele sale s\u0103 fie eliminate. Clientul final poate solicita ca datele sale s\u0103 fie eliminate de c\u0103tre OA. <\/p>


<\/p>\n

<\/p>\n

Sunt interzise conturile de utilizator partajate pentru angaja\u021bi? Cum r\u0103m\u00e2ne cu clien\u021bii?<\/b><\/p>\n

Angaja\u021bii au propriile lor conturi dedicate. Clien\u021bii au, de asemenea, propriile conturi dedicate, cu acces doar la datele lor.<\/p>\n

<\/p>\n

Construc\u021bia parolei dvs. necesit\u0103 cerin\u021be de rezisten\u021b\u0103 multiple, adic\u0103 parole puternice \u0219i utilizeaz\u0103 o secven\u021b\u0103 aleatorie de caractere alfa, numerice \u0219i speciale?<\/b><\/p>\n

La nivelul de baz\u0103 de gestionare a parolelor, avem nevoie de un minim de 6 caractere pentru parole. OWASP \u0219i NIST SP 800-63-3 op\u021biuni de politici privind parolele pot fi disponibile \u00een anul urm\u0103tor.<\/p>\n

<\/p>\n

Este grani\u021ba re\u021belei protejat\u0103 cu un firewall cu filtrare de intrare \u0219i ie\u0219ire?<\/b><\/p>\n

Da. Toate firewall-urile \u0219i facilit\u0103\u021bile de echilibrare a \u00eenc\u0103rc\u0103turii sunt furnizate de Azure \u0219i Amazon AWS.<\/p>\n

<\/p>\n

Sunt serverele cu acces public \u00eentr-o zon\u0103 demilitarizat\u0103 (DMZ) bine definit\u0103?<\/b><\/p>\n

Da, acest lucru este mo\u0219tenit de la zonarea implicit\u0103 a infrastructurii Azure, iar Bookafy are servere regionale r\u0103sp\u00e2ndite \u00een \u00eentreaga lume. <\/p>\n

<\/p>\n

Este utilizat\u0103 segmentarea re\u021belei interne pentru a izola \u0219i mai mult resursele de produc\u021bie sensibile, cum ar fi datele PCI?<\/b><\/p>\n

Datele PCI nu sunt stocate, deoarece sunt doar \u00eencadrate de Bookafy de la furnizori ter\u021bi, cum ar fi Stripe \u0219i Authorize.net. Bookafy nu colecteaz\u0103 date \u0219i nu stocheaz\u0103 date. <\/p>\n

<\/p>\n

Este implementat\u0103 \u0219i monitorizat\u0103 detectarea sau prevenirea intruziunilor \u00een re\u021bea?<\/b><\/p>\n

Un spectru larg de instrumente de monitorizare, completate de notific\u0103rile \u0219i alertele furnizate de Azure, r\u0103m\u00e2n \u00een permanen\u021b\u0103 active. Aceasta include detectarea intruziunilor \u0219i confirmarea prin e-mail a accesului la re\u021bea.<\/p>\n

<\/p>\n

Sunt toate desktopurile protejate cu ajutorul unui software actualizat \u00een mod regulat \u00eempotriva viru\u0219ilor, viermilor, programelor spion \u0219i a codurilor mali\u021bioase?<\/b><\/p>\n

Da.<\/p>\n

<\/p>\n

Serverele sunt protejate folosind practicile de \u00eent\u0103rire din industrie? Sunt documentate practicile?<\/b><\/p>\n

Serviciile de securitate sunt utilizate \u00een mod regulat pentru a furniza audituri de securitate a sistemului. <\/p>\n

<\/p>\n

Exist\u0103 o gestionare activ\u0103 a patch-urilor furnizorului pentru toate sistemele de operare, dispozitivele de re\u021bea \u0219i aplica\u021biile?<\/b><\/p>\n

Da. Acest lucru este furnizat automat de Azure prin intermediul serviciului lor.<\/p>\n

<\/p>\n

Sunt \u00eenregistrate \u0219i p\u0103strate toate erorile sistemului de produc\u021bie \u0219i evenimentele de securitate?<\/b><\/p>\n

Jurnalele sunt p\u0103strate timp de cel pu\u021bin o lun\u0103, iar unele r\u0103m\u00e2n p\u00e2n\u0103 la 6 luni, \u00een func\u021bie de gravitatea \u0219i de m\u0103surile necesare.<\/p>\n

<\/p>\n

Evenimentele de securitate \u0219i datele de jurnal sunt revizuite periodic?<\/b><\/p>\n

Da. Jurnalele sunt revizuite zilnic, s\u0103pt\u0103m\u00e2nal \u0219i lunar – \u00een func\u021bie de natura evenimentelor din jurnal.<\/p>\n

<\/p>\n

Exist\u0103 un program de confiden\u021bialitate documentat, cu m\u0103suri de siguran\u021b\u0103 pentru a asigura protec\u021bia informa\u021biilor confiden\u021biale ale clien\u021bilor?<\/b><\/p>\n

Da.<\/p>\n

<\/p>\n

Exist\u0103 un proces de notificare a clien\u021bilor \u00een cazul \u00een care se produce o \u00eenc\u0103lcare a confiden\u021bialit\u0103\u021bii?<\/b><\/p>\n

Da.<\/p>\n

<\/p>\n

Stoca\u021bi, procesa\u021bi, transmite\u021bi (adic\u0103 “manipula\u021bi”) informa\u021bii personale identificabile (PII)?<\/b><\/p>\n

Da.<\/p>\n

<\/p>\n

\u00cen ce \u021bar\u0103 sau \u021b\u0103ri sunt stocate informa\u021biile de identificare personal\u0103?<\/b><\/p>\n

Cele mai multe dintre datele noastre PII sunt stocate \u00een SUA. Cu toate acestea, suntem \u00een m\u0103sur\u0103 s\u0103 stoc\u0103m datele de cont pentru clien\u021bii no\u0219tri \u00eentreprinderi \u00eentr-un anumit centru regional. Exemplu. Organiza\u021biile australiene pot alege ca datele lor s\u0103 fie stocate \u00een loca\u021bia noastr\u0103 Azure din Canberra. Sau \u021b\u0103rile europene pot stoca \u00een centre de date europene. <\/p>\n

<\/p>\n

Sunt jurnalele de sistem protejate \u00eempotriva modific\u0103rii \u0219i distrugerii?<\/b><\/p>\n

Aceasta este furnizat\u0103 de Azure \u0219i este salvat\u0103 pe Dropbox Cloud Storage.<\/p>\n

<\/p>\n

Punctele de intrare la grani\u021b\u0103 \u0219i VLAN sunt protejate de dispozitive de protec\u021bie \u00eempotriva intruziunilor \u0219i de detectare care ofer\u0103 alerte \u00een caz de atac?<\/b><\/p>\n

Da. Aceste servicii sunt incluse \u00een firewall-ul nostru Azure, care protejeaz\u0103 \u00eempotriva intruziunilor \u0219i trimite alerte automate c\u0103tre echipa noastr\u0103 de dezvoltare. <\/p>\n

<\/p>\n

Sunt jurnalele \u0219i evenimentele corelate cu un instrument care s\u0103 ofere avertismente cu privire la un atac \u00een desf\u0103\u0219urare?<\/b><\/p>\n

Da, serviciul nostru de securitate include \u00eenregistrarea \u0219i alertele de atac \u00een timp real. <\/p>\n

<\/p>\n

Cum sunt segregate datele de al\u021bi clien\u021bi \u00een cadrul solu\u021biei, inclusiv re\u021belele, front-end-urile, stocarea back-end \u0219i copiile de rezerv\u0103?<\/b><\/p>\n

Fiecare cont de client este separat \u00een mod logic de ceilal\u021bi clien\u021bi, prin utilizarea unui identificator persistent al chiria\u0219ului \u00een toate \u00eenregistr\u0103rile din baza de date.<\/p>\n

<\/p>\n

\u00cen plus, tot codul aplica\u021biei are nevoie de acest identificator de chiria\u0219 pentru toate opera\u021biunile – at\u00e2t de citire, c\u00e2t \u0219i de scriere. De asemenea, exist\u0103 un regim de testare automat\u0103 pentru a proteja modific\u0103rile de cod \u00eempotriva regresiilor \u0219i a posibilei contamin\u0103ri a datelor \u00eentre locatari.<\/b><\/p>\n

<\/p>\n

Identificatorul chiria\u0219ului este “legat” de fiecare cont de utilizator \u0219i este aplicat \u00een mod logic prin intermediul clauzelor fixe “WHERE” \u00een interog\u0103rile bazelor de date \u0219i prin m\u0103suri echivalente pentru accesul la fi\u0219iere. Un utilizator al platformei nu are posibilitatea de a schimba sau de a se decupla \u00een alt mod de sesiunea sau de contul s\u0103u de la acest identificator de chiria\u0219. Astfel, nu exist\u0103 nicio posibilitate logic\u0103 ca un utilizator s\u0103 aib\u0103 autoriza\u021bie de conectare sub un alt identificator de chiria\u0219. Chiar dac\u0103 \u00eencercau s\u0103 acceseze paginile folosind un alt ID de chiria\u0219, sistemul respingea cererea deoarece contul de utilizator nu era \u00eenregistrat la ID-ul de chiria\u0219 solicitat.<\/p>\n

<\/p>\n

Ave\u021bi un plan de r\u0103spuns la incidente?<\/b><\/p>\n

Da, se p\u0103streaz\u0103 un “document viu” care prezint\u0103 r\u0103spunsul la dezastre \u0219i incidente.<\/p>\n

liste de verificare, date de contact \u0219i facilit\u0103\u021bi cheie ale sistemului pentru \u00een\u021belegerea \u0219i r\u0103spunsul la incidente.<\/p>\n

<\/p>\n

Ce nivel de protec\u021bie a re\u021belei este implementat?<\/b><\/p>\n

Utiliz\u0103m Azures Web Application gateway (load balancer) \u0219i Next Generation Firewall pentru a ne proteja re\u021beaua de ma\u0219ini virtuale care ruleaz\u0103 pe Azure Cloud. <\/p>\n

<\/p>\n

Furnizeaz\u0103 platforma rapoarte pentru m\u0103surarea performan\u021bei calit\u0103\u021bii serviciului (QOS) (utilizarea resurselor, randament, disponibilitate etc.)?<\/b><\/p>\n

Astfel de m\u0103sur\u0103tori nu sunt furnizate clien\u021bilor, \u00een afar\u0103 de disponibilitatea \u0219i timpii de r\u0103spuns conform paginii noastre de stare pe status.pingdom.com.<\/p>\n

<\/p>\n

Programul de recuperare \u00een caz de dezastru este testat cel pu\u021bin o dat\u0103 pe an?<\/b><\/p>\n

Da, verific\u0103rile de recuperare sunt efectuate \u0219i testate anual.<\/p>\n

<\/p>\n

Care este obiectivul de timp de recuperare (RTO) \u0219i obiectivul de punct de recuperare (RPO) al sistemului?<\/b><\/p>\n

RTO este de 4 ore, iar RPO este de 1 or\u0103.<\/p>\n

<\/p>\n

Oferi\u021bi planuri de backup \u0219i restaurare pentru clien\u021bi individuali?<\/b><\/p>\n

Toate aspectele sunt multi-locatari, astfel \u00eenc\u00e2t copiile de rezerv\u0103 sunt efectuate pentru \u00eentreaga baz\u0103 de clien\u021bi. Copiile de rezerv\u0103 complete ale fi\u0219ierelor sunt efectuate la fiecare 24 de ore \u0219i beneficiaz\u0103 de copiile de rezerv\u0103 punctuale ale bazei de date Azure, efectuate la fiecare 5 minute. Copiile de rezerv\u0103 sunt stocate pe Dropbox Cloud, precum \u0219i pe ma\u0219ini virtuale Azure redundante. <\/p>\n

<\/p>\n

Care este durata maxim\u0103 de p\u0103strare a copiilor de rezerv\u0103?<\/b><\/p>\n

Copiile de rezerv\u0103 punctuale ale bazelor de date sunt p\u0103strate timp de 30 de zile, iar copiile de rezerv\u0103 generale ale fi\u0219ierelor timp de cel pu\u021bin 90 de zile.<\/p>\n

<\/p>\n

Care este timpul de execu\u021bie preconizat pentru o restaurare a datelor?<\/b><\/p>\n

Orice restaurare a clientului \u00een orice scenariu care nu este un dezastru trebuie s\u0103 fie solicitat\u0103 \u0219i programat\u0103 cu noi. Termenul de livrare este \u00eentre 1 \u0219i 2 zile lucr\u0103toare. <\/p>\n

<\/p>\n

Poate fi restaurat contul unei singure entit\u0103\u021bi f\u0103r\u0103 a afecta \u00eentreaga platform\u0103?<\/b><\/p>\n

\u00cen cazul \u00een care un client solicit\u0103 restaurarea unui anumit document sau artefact, aceasta poate fi efectuat\u0103 online, la cerere, \u0219i este o activitate pl\u0103tibil\u0103. Nu exist\u0103 niciun impact asupra platformei sau asupra contului clientului.<\/p>\n

<\/p>\n

Este asigurat\u0103 disponibilitatea ridicat\u0103 – i. e. \u00een cazul \u00een care o instan\u021b\u0103 de server devine indisponibil\u0103, o alta devine disponibil\u0103?<\/b><\/p>\n

Mai multe instan\u021be de servere ruleaz\u0103 la toate nivelurile de sistem prin intermediul ma\u0219inii virtuale Azure, Web Application Gateway asigur\u00e2nd echilibrarea sarcinii. E\u0219ecul unei instan\u021be de server \u00een cadrul centrului de date este gestionat de Azure WAG, instan\u021ba cu probleme fiind reciclat\u0103 \u0219i\/sau eliminat\u0103 \u0219i \u00eenlocuit\u0103 cu o nou\u0103 instan\u021b\u0103.<\/p>\n

<\/p>\n

Sunt datele stocate \u0219i disponibile \u00eentr-o alt\u0103 loca\u021bie (centru de date) pentru a \u00eendeplini cerin\u021bele de recuperare \u00een caz de dezastru?<\/b><\/p>\n

Da. Toate datele sunt replicate \u00eentr-un al doilea centru de date, care difer\u0103 \u00een func\u021bie de loca\u021bia geografic\u0103, precum \u0219i de faptul c\u0103 datele de rezerv\u0103 sunt stocate pe Dropbox Cloud Storage. .<\/p>\n

<\/p>\n

Este procesul de failover un proces de comutare activ\/activ, automat?<\/b><\/p>\n

E\u0219ecul unei instan\u021be de server \u00een cadrul centrului de date primar este gestionat de c\u0103tre echilibrul de sarcin\u0103 Azure WAG, instan\u021ba cu probleme fiind reciclat\u0103 \u0219i\/sau eliminat\u0103 \u0219i \u00eenlocuit\u0103 cu o nou\u0103 instan\u021b\u0103.<\/p>\n

\u00cen cazul \u00een care \u00eentregul centru de date ar suferi o defec\u021biune critic\u0103, atunci trecerea la centrul secundar este un proces manual, deoarece trebuie s\u0103 efectu\u0103m mai \u00eent\u00e2i o evaluare complet\u0103 a problemei pentru a ne asigura c\u0103 nu exist\u0103 solu\u021bii simple pentru a men\u021bine disponibil\u0103 prezen\u021ba centrului primar existent. \u00cen cazul \u00een care se stabile\u0219te c\u0103 este necesar\u0103 o mutare la centrul secundar, atunci comutarea va fi ini\u021biat\u0103 manual pentru a \u00eendeplini obiectivele de recuperare.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Securitatea \u0219i confiden\u021bialitatea Bookafy Folosi\u021bi Bookafy cu \u00eencredere \u0219i al\u0103tura\u021bi-v\u0103 celor peste 15.000 de afaceri din \u00eentreaga lume care au \u00eencredere \u00een Bookafy. Calendare conectate Atunci c\u00e2nd este conectat la […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"categories":[2300,1738],"tags":[],"class_list":["post-314782","page","type-page","status-publish","hentry","category-pagina-post-ro","category-primary-pages-ro","rishi-post","no-post-thumbnail"],"rishi__cb_customizer_meta":"","_links":{"self":[{"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/pages\/314782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/comments?post=314782"}],"version-history":[{"count":0,"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/pages\/314782\/revisions"}],"wp:attachment":[{"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/media?parent=314782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/categories?post=314782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bookafy.com\/ro\/wp-json\/wp\/v2\/tags?post=314782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}