Secure Operations

Security across the entire service lifecycle

Security is not a component, but something that must permeate all parts around an IT service. At Basefarm, we ensure that security is taken into consideration in every step of the service delivery. Basefarm is PCI DSS and ISO27001 certified and we believe that security is key to our customers, and we continuously work to improve the security of our customer solutions from both a vulnerability and operational perspective. A key part to ensuring security delivery of our services is our Basefarm Security Incident Response Team and Security Operations team.

Few hosting providers offer full-coverage security in their operations. Thus, clients are often forced to consult safety experts when security concerns are forced upon them after a major incident or when they belatedly need to review their de facto operational security. We focus on security across the entire service lifecycle, which means that we are designing secure operating environments, have a full range of security services that we tailor to the needs of each customer, and can advise on security issues or concerns.

Security Expertise

Basefarm offers full-coverage security. In addition to a dedicated Operational Security department (SecOps), we have a Basefarm Security Incident Response Team (BF-SIRT) composed of specialized experts to assist during security incidents.

Why Basefarm?

We provide the same security services as a pure security service provider, but you get the added benefit of working with a partner you already have a relationship with. You won’t need to invest time and money as we get to understand your business, challenges and operating environment, because we already know them.

Additionally, Basefarm has a team of 400 specialists throughout the whole range of infrastructure. Our security teams have direct access to other experts in a wide range of specialized technical disciplines.

Security is a necessity

In the past, it was mainly huge, high profile companies who were subjected to cyber sabotage, extortion and blackmail. Now malware automatically tests for vulnerabilities in the systems of any size company.

Our customers demand security, and they demand the newest and most advanced security solutions. Our Security Operations is a separate department within Basefarm, dedicated to providing the best security services that our customers need.

SecOps

Our SecOps team is made up solely of security professionals whose only job is to keep you secure. They do this by providing security services, but also by working with other operations and customer teams within Basefarm to make sure they are following the best security practices and using the best technical solutions.

SecOps have the full lifecycle responsibility for security and compliance. We design, implement, roll out and maintain security services. SecOps offers services such as web application firewalls, vulnerability assessments, multi factor authentication services, penetration testing, intrusion detection, and security information and event management solutions. We also are responsible for areas like security service design, implementation, reporting, presale support and vulnerability management.

PayEx needed to design, build and run their state of the art Nordic payment solution catering robustness, flexibility and cost efficiency. The platform needed to be PCI DSS compliant as it exchanges, processes and stores huge amounts of card data and financial information. The solution is mission critical and margins and reputation are built over time, by delivering payment services with high quality, competence and value. They needed a secure and stable environment and a partner with solid systems for operations and interaction, as well as an “advisor” regarding technology.

Basefarm designed the platform in close collaboration with PayEx. Since the PCI solution went live in the summer of 2011, it has now passed 300 million transactions with excellent performance, peaking at around 1.3 million transactions per day. PayEx use Basefarm actively and proactively in decision-making regarding the environment and other challenges related to technology.