iCONECT offers several levels of security to ensure the integrity and safety of your data and work-product.
Incorporate these security levels as needed to meet your existing security practices

• A-130
• SAOP

SUPPORTED USES:

• FOIA - Production and sharing of materials or redacted materials for the Freedom of Information Act requires the full or partial disclosure of previously unreleased information and documents controlled by the United States government upon request.
• HIPAA - The Health Insurance Portability and Accountability Act is a federal law that protects sensitive patient health information from being disclosed without the patient’s consent or knowledge.
• CCPA - California Consumer Privacy Act - Privacy legislation around collecting personal information from California residents.
• DSAR - Data Subject Access Request is a submission by an individual (data subject) to a business asking to know what personal information of theirs has been collected and stored as well as how it is being used. Individuals can also use a DSAR to ask that certain actions be taken with their data.
• GDPR - General Data Protection Regulation is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. The GDPR is an important component of EU privacy law and of human rights law, in particular Article 8 of the Charter of Fundamental Rights of the European Union.
• FEDRAMP – iCONECT technology has passed the Federal Risk and Authorization Management Program (Moderate) criteria. * ATO with Federal Trade Commission from inception and successful audit, through two additional re-authorization cycles with no deficiencies.
• NARA - National Archives and Records Administration authorized and administered by HLP for Veteran Affairs.

  *Although iCONECT software is FedRAMP compatible iCONECT SaaS does not operate as a FedRAMP facility at this time.
  

• Section 508  - User interface complies with standards, technical requirements, and criteria used to measure conformance to accessibility law. (Candidate for use)
• PDF Viewing - Meets WCAG 2.0, PDF/UA comprehensive standards.
• Print/Production - Focused on data delivery and sharing. All produced data can meet U.S. Securities and Exchange Commission - Data Delivery Standards - Rev 8/2021 standards.
• Audit - Burp Suite web vulnerability scan v2.1.03 (compliant)
• Audit - IBM Security AppScan Standard 9.0.0.1, Rules: 1731 Scan (compliant)
• MFA - Multi-Factor Authentication compatible 

To keep pace in this ever-changing security landscape, it’s important that cloud infrastructure offers optimal data protection while also lowering costs and reducing complexity. iCONECT SaaS relies on Microsoft Azure technology to meet those challenges. Azure global infrastructure is made up of two key components—physical infrastructure and connective network components. The physical component is comprised of 200+ physical datacenters, arranged into regions, and linked by one of the largest interconnected networks on the planet.

iCONECT SaaS utilizes Microsoft Defender for Endpoint (MDE) which is a security solution that provides protection against malware and other advanced threats for devices running Windows, macOS, and Linux. While MDE does not offer traditional IDS or IPS, it does include several features that can help detect and prevent intrusions.

Microsoft Azure offers an end-to-end backup and disaster recovery solution that’s simple, secure, scalable, and cost-effective—and can be integrated with on-premises data protection solutions. In the case of service disruption or accidental deletion or corruption of data, recover your business services in a timely and orchestrated manner. The Azure backup and disaster recovery solution are simple to architect, cloud-native, highly available, and resilient.