Security

Security and transparency of operation is critical in all IT workloads, on cloud or off. With AWS, much of this is wrapped up in an API activity log service, AWS CloudTrail. Modis likes sending this log stream directly to separate, dedicated security logging accounts, were general administration staff can’t access logs. We’re also keen on using automated security log event identification and alerting in near real-time.

For secure interactive (AWS Web Console) access, we use physical Multi-Factor Authentication (MFA) tokens based upon Time-based One Time Passwords (TOTP) for all master (root) account credentials, with federation of identity back to your corporate directory (such as Active Directory by way of SAML federation) which may also implement an MFA policy.

Understanding these dependencies, and working to ensure that the customer's security posture is maximised without unduly inflicting delay and complication on staff is important; and we'll work with our customers and their existing IT security teams to help them understand any risks and benefits.

We’re fanatical about encryption, algorithms, ciphers, signatures, and validation. Modis’ cloud approach is to use only encrypted protocols for all data transfers, both in transit to/from the cloud, as well as intra-cloud. We love disabling old crypto protocols, using only the latest and strongest ciphers, ephemeral keys for forward secrecy protection, and strong chains of trust.

We also love helping our customers understand how this looks over time. With Modis, you can be as secure as your bank, if not more so.

Modis maintains a number of staff holding the coveted AWS Security Specially Certification. This challenging certification is critical recognition by Amazon Web Services of Modis’ technical staff in the capability they bring to bear for our customers in the security space. Our team also hold many other industry and 3rd-party vendor security-releated certifications, professional memberships and more. Our security staff are well versed with decades of experience in security.