Cryptographics controls ensure confidentiality, authenticity, non-repudiation, and authentication of sensitive information. The Camio service itself encrypts all sensitive data both in transit and at rest using Google Cloud Platform (GCP) automatically managed keys. Camio encrypts data for both transmission and storage (at rest).
The keys for application-specific cryptography are accessible only via TLS/HTTPS to the machine that deploys virtual servers (i.e. only the deployment engineer has the keys; they're not accessible to developers, and developers cannot deploy to production servers).
All communications over public networks and over private networks between data centers use TLS/HTTPS encryption.
Camio requires that every employee follow these policies:
A Clean Desk policy is not only ISO 27001/17799 compliant, but it is also part of Camio’s standard basic privacy controls, requiring that employees comply with the following:
Misuse of email can pose critical legal, privacy and security risks.
Under no circumstances is any employee authorized to engage in any activity that is illegal under local, state, federal or international law while utilizing Camio owned resources. The following list is not exhaustive but attempts to characterize activities that are prohibited.
Employees may only use Camio removable media in work computers. Camio removable media may not be connected to or used in computers that are not owned or leased by Camio without explicit permission. Sensitive information should never be stored on removable media.
Logging from critical systems, applications and services can provide key information and potential indicators of compromise. Although logging information may not be viewed on a daily basis, it is critical to have from a forensics standpoint.
All systems that handle confidential information, accept network connections, or make access control (authentication and authorization) decisions shall record and retain audit-logging information sufficient to answer the following questions:
Logging must contain or unambiguously infer: