How to Perform Security Audits

Our role is to provide a safe and optimal environment for all our customers. This is why we encourage them to perform security audits.

In this article — that applies only to HybridCloud — we explain the procedure to follow to achieve this goal.

Note :  The PlanetHoster Glossary contains explanations on multiple topics and can be consulted to clarify certain terms.

Procedure

Here are the official steps to follow:

1. Create a ticket to inform our team (how).
2. Provide a copy of the mandate given to the security firm in charge of the audit, so that we can identify the level of access required.
3. Provide a list of the persons mandated to intervene in the audit.
4. Provide an official authorization (signed letter) from the client releasing PlanetHoster from any liability that may arise from this intervention.
5. Provide a copy of the “Errors and Omissions” liability insurance of $2M of the mandated firm.
6. An experienced “SysAdmin” will be assigned to your infrastructure to analyze the details of the logs, in order to validate if the mandate assigned to the security firm is well respected (the regular hourly rate will apply).

Access or IPs will only be allowed on the infrastructures for a period of 24 to 72 hours between Tuesday and Thursday.