As a trusted service provider to educational institutions and organisations, we recognise the critical importance of safeguarding data in today's interconnected cyberspace. With the proliferation of cybersecurity threats and attacks, protecting sensitive information has become more crucial than ever before. At Alumnly, we prioritise cybersecurity and employ a comprehensive approach to ensure that our users' data remains secure and reliable.
We understand that cybersecurity is not a one-size-fits-all solution, which is why we utilise a combination of robust measures to fortify our platform against potential threats. Our cybersecurity strategy encompasses various layers of defence, including:
SSL/TLS Encryption
Alumnly uses Secure Hash Algorithm 256-bit (SHA-256) to provide data integrity, authentication and security of data transmitted between users' browsers and its servers. SHA-256 is a widely recognised cryptographic hash function known for its use in blockchain technology and for facilitating secure data transmission.
Secure Authentication
A password policy is an essential part of ensuring data security and protecting personal data from unauthorised access. Alumnly implements password policies that aligns with GDPR’s (General Data Protection Regulation) principles of data protection.
Firewalls & Intrusion Detection Systems
Alumnly utilises both web application firewalls (WAFs) and intrusion detection systems (IDS) as cybersecurity solutions designed to detect and prevent web-based attacks. WAFs focuses specifically on protecting web applications by filtering and inspecting HTTP traffic, while IDSs monitor network and system activity for signs of intrusion or suspicious behaviour.
Data Encryption
Implementing robust data encryption measures is essential for safeguarding sensitive information, especially in the event of a security breach. At Alumnly, we prioritize data security and adhere to encryption best practices to ensure that both "data in transit" and "data at rest" are adequately protected. Alumnly ensures that sensitive information is safeguarded against unauthorized access and maintains the confidentiality and integrity of our users' data.
Regular Updates and Backups
Alumnly undergoes regular updates to ensure that its software, applications, plugins, patches, and frameworks remain up-to-date, thereby addressing any security vulnerabilities that may arise. Additionally, regular backups are performed to safeguard against potential security breaches or data loss, enabling swift recovery in the event of an unforeseen incident.
Security Headers
Alumnly implements both Content Security Policy (CSP) and HTTP Strict Transport Security (HSTS) to enhance the security of its web applications. This help prevent various types of attacks, such as XSS and session hijacking.
Security Testing
Alumnly regularly conducts security assessments, which encompass vulnerability scanning and penetration testing, aimed at identifying and rectifying potential security vulnerabilities before they can be exploited by attackers. The combination of vulnerability scanning and penetration testing allows Alumnly to proactively identify, prioritise, and remediate security vulnerabilities and weaknesses, thereby reducing the risk of exploitation by malicious attackers and ensuring the confidentiality, integrity, and availability of its systems and data.
User Education
We regularly educate users about security best practices for maintaining a secure environment. This includes raising awareness about common threats like phishing scams, where attackers attempt to deceive users into revealing sensitive information, and providing guidance on how to identify and avoid them. Additionally, promoting the use of strong and unique passwords to significantly enhance security posture by reducing the likelihood of unauthorised access to accounts and systems. By empowering users with knowledge and tools to safeguard their information, Alumnly effectively mitigate the risk of security incidents.
Secure Hosting
Alumnly uses Amazon Web Services (AWS) which is the world’s most comprehensive and broadly adopted cloud. It is architected to be the most flexible and secure cloud computing environment available today. AWS core infrastructure is built to satisfy the security requirements for the military, global banks, and other high-sensitivity organizations. This is backed by a deep set of cloud security tools, with over 300 security, compliance, and governance services and features, as well as support for 143 security standards and compliance certifications.
Data Breach Policy
The Alumnly Data Breach Policy outlines the procedures and responsibilities for identifying, responding to, and mitigating the effects of data breaches. This policy ensures that data breaches are handled in a timely and efficient manner to minimise harm and comply with regulatory requirements.
