Hosted Web Servers |
The SurePrep web servers are housed and managed by AT&T at their Internet Data Center in Irvine, CA. This $150M flagship facility utilizes state of the art firewall and intrusion detection technology allowing SurePrep to achieve a high level of security. Our servers and firewall are monitored on a 24/7 basis. Performance reports are generated to assure maximum operational availability. Cisco-Powered load balancing is in place to achieve the best possible system performance. Through weekly patch management, AT&T is constantly updating our security software to protect against unauthorized access to our network systems. Daily back-ups are performed and stored on-site using media that is not easily transportable. |
Facility Security |
| •
Regulated, monitored access |
• Biometric palm scanners |
| • Individual card key access |
| • Digital recordings and video storage |
|
|
Environmental Control |
| •
Static free environment |
• 24 X 7 NOC personnel presence |
| •
Fenwall air sampling systems |
| •
FM-200 multi-zone suppression systems |
|
| |
Network Operations Center |
| •
Permissively neutral network |
| •
Dual path, dual entrance fiber facilities |
| •
Complete redundancy |
|
|
Building Power |
| •
Continuous, uninterrupted operation |
| •
N + 1 dual fed redundancy |
|
| |
Certifications |
| •
AT&T is ISO 9001:2000 Certified |
• The AT&T Data Center has a SAS-70 certification. Annual reviews of their internal controls are reported on
by KPMG |
|
| TOP |
| SurePrep Tax Center |
The SurePrep Tax Center is a Microsoft SQL based ASP application. Password protected logins restrict access to registered users. User passwords are encrypted in the SQL database and a log is maintained of all users that access the system. The SurePrep Tax Center uses 128-bit Secure Socket Layer encryption for all data transfers. This is the same encryption technology used by banks for securing online banking transactions. |
| TOP |
| Non-disclosure / Confidentiality Agreements |
All SurePrep employees in the U.S. and India are required to sign non-disclosure/confidentiality agreements. Each employee is bound by the agreement and not allowed to discuss information from engagements they are working on with anyone unless there is a question related to the preparation of the engagement. Preparers and reviewers are only allowed to request help from their direct supervisors. |
| TOP |
| Service Centers |
SurePrep has implemented a comprehensive service center security policy that is designed to ensure the protection of data. Security measures include policies that: |
- Restrict physical access to the processing and server environments.
- Ensure a paperless environment so data can not be removed from the facility.
- Standard computer hardware and software configurations restrict access to email and Internet sites. Medialess computers ensure files can not be copied.
|
| |
Physical Security |
| •
A security guard is stationed at the entrance. |
| •
Access card required to enter the facility. |
| •
Access card required to enter the server room. Access is restricted to the IT and service center manager. |
|
| |
Paperless Environment |
| •
Returns are prepared in a paperless environment. No source documents or tax returns are printed. |
| • The printer in the server room is limited to printing management reports |
| • Paper shredders are used by management to shred management reports |
|
| |
Personal Belongings |
| • Briefcases and other personal belongings are not allowed in the service center |
|
| |
Hardware Requirements |
| •There are no removable media devices. The PC’s do not have floppy drives or CD R/W drives |
|
| |
Internet Access |
| • No access to email |
| • Outlook and Outlook Express have been removed from all PC’s |
| • No access to internet except for: |
- SurePrep site for return processing
- Global fx site for return processing
- GoSystem RS site for return processing
- RIA Checkpoint access is allowed for supervisors only
|
|
| |
Software Requirementss |
| •
Windows 2000/XP OS |
| • MS Word and Excel |
| • Adobe Acrobat |
| • Norton Anti-Virus |
| • WIN ZIP |
| • SurePrep processing software |
| • Tax processing software |
|
| TOP |