Our server is located in one of the world’s largest IT centres. Access to the server room is controlled in multiple layers of security and requires a personal transponder card, PIN and palm scan. Once inside, accessing the server itself takes another PIN, since the server is in a locked cabinet.
The operating system is pure server software. No unnecessary modules are installed, so they can offer no avenue of attack.
Patch management is automated. All incoming patches are examined, and then installed either immediately or on the next business day.
In order to ensure the highest security, we do not use a local firewall, but an external one. This firewall is restrictively configured and automatically leaves Ports 80 and 443 closed.