Concepts

Physical security

The physical access to Combell's data centre - within the infrastructure of InterXion - is very strictly regulated. Security staff supervises night and day the access to the building and its use.

Of course, there is also video surveillance. In the data centre, Combell's entire infrastructure is located in an own 'private cage', with separate access control systems. Only Combell's system engineers - who were carefully selected and screened - have access to this space. As a Combell customer, you do not have access either to the data centre, unless you are accompanied.

Data security

Data are your dearest possessions. They give concrete content to your company processes. That is why you should always be very careful when it comes to storing and securing your company data. Designing the best suitable backup solution is a custom piece of work on its own. Indeed, every company environment is different. The type of backup solution depends on several factors: the data volume, the speed at which the data volume evolves and the way it evolves, the preference for on-site or off-site data storage, etc.

Fault tolerance

Technical measures thanks to which a failure does not immediately lead to data loss, among which redundant power supply on servers and storage hardware and RAID technology, thanks to which the failure of a hard disk does not cause data loss.

Replication

Combell continuously copies your data to a second storage system.

When the first storage system fails, the data are available through the second system.

Network security

Network security is based on firewalling. This accurate architecture of the security is a choice you make in close collaboration with Combell. For less critical applications, you can choose a shared firewall.

It offers a sufficient security level, but may suffer inconvenience due to the large amount of underlying sites or servers in case of an attack or incident. A dedicated firewall provides a higher availability guarantee, especially when you choose a redundant configuration. In this context, Combell also delivers all requested managed services, of which we determine the parameters and security rules in consultation with the customer.

For very sensitive data, Combell advises an approach with different servers separated by a firewall. Only servers that are in direct contact with the Internet are in the DMZ (demilitarized zone). As an option, system management and backups occur through a separate backend firewall. In that case, Combell separates user traffic from system management. As an option, Combell can provide additional solutions for intrusion detection and prevention.

Backup & restore

At regular intervals, a backup of the data is kept on a separate system or in another location.

Backup allows to return to the last known set of company data. Combell determines the adequate frequency and the desired recovery time in consultation with the customer.

Encryption

Combell can save and duplicate your company's sensitive data in encrypted format, which makes them readable only by your servers.