# Cyber Security

## Cyber Security

Why settle when you can have the best of **both**

**Experts With Integrity**

**Analytical Problem Solvers**

We understand your data is important and confidential and deserves to be treated that way.

We work every day to constantly improve our security footprint.

## **Corporate Governance**

#### SSAE SOC 1, 2 Type II Audit

#### COSO Risk Assessment

#### Corporate Compliance

We understand you have Corporate Compliance needs - we work with your teams to complete internal annual assessments.

#### Corporate Training

Industry Best Practices around Info / Cyber Security

#### Data Privacy

Your data (and your clients’ data) is confidential. We don’t monetize, re-sell, or use it for benchmarking or AI training. It's that simple.

## **Secure Software Development Life Cycle (SSDLC)**

#### Intentional Design

#### Risk Assessment

#### Threat Modeling

#### Secure Design Review

#### Secure Coding Training

#### Static Code Analysis

#### Dynamic Application Testing

#### Industry Recognized 3rd Party Penetration Testing

## **Secure Hosting**

AWS Multi-AZ / Multi Region

#### Redundant and Resilient 99.999% Uptime

#### Adopted AWS Best Practices

#### Hosted with AWS

The Rockport Systems are hosted with Amazon Web Services (AWS). Both Rockport and AWS are SSAE SOC 1, 2 Type II Compliant - that's a fancy way of saying that, with Rockport, your data is hosted in a secure, reliable way available, with 24x7x365 / 99.999% Uptime.

## **Secure Authentication**

#### Industry Lead Authentication Platform

#### Supports Single Sign-On

You control your user's identity management

## **Application Role Based Permissions**

#### Connect securely from anywhere

Your data is encrypted in transit and at rest. Read/write access is client-defined at the individual user or user group level - which includes internal users as well as third parties.