Focus1 Data, Inc - Industry Leading Data, Print, & Mailing Services

CLIENT LOGIN

No Letter Left Behind!

Your Data is Gold. We are Fort Knox

At the heart of your business is your list. You simply cannot afford any unauthorized access of your data. In this digital age, you must take every precaution to safeguard your data. FOCUS1 provides you with the ultimate in state of the art digital and physical security procedures to make sure that you�re always one step ahead of any unauthorized interception or access to your data.
Encryption Security
Protect your data from unauthorized access or interception. FOCUS1 is proud to exceed all current Federal Security compliance guidelines. Inbound and outbound file transfers are securely encrypted using 1024-bit SSL and a digitally signed custom Java applet via LiquidShare loaded directly into our

internal network. Files are encrypted from point to point and use no third party vendors during any part of the transmission.

We provide multiple methods for data transmission security and encryption for both inbound services and outbound services utilizing all three certificate technologies: e-mail, SSL server based, and digital signed applications. We have SLA agreements with the Como do Group, DynDns.Com, and Verisign handing all three areas respectively. All employee and service based e-mail accounts have installed digital signatures for all outbound mail and full 3DES 168-bit encryption capabilities on all correspondence.

Internet Access Security

All internet access controls have been upgraded and performed via Watchguard, including stateful inspection, audit logging, alarm notification, and automatic unauthorized access procedures. Firewall configuration and integrity checks are performed on a regular basis. Firewall logging and audit services are performed on a centralized logging server.

Network Access Security

All user and information access is granted via a “denied unless needed” policy as stated by Federal Security compliance regulations. User and information access is controlled and managed by a company appointed security manager, which is the established centralized point of security control for all access and authentication requests.

Integrity Controls

Security is constantly reviewed by the Security Director and at least one third party vendor. Integrity controls follow similar rules as set by the current international ISO/IEC standards 2007. Data security, authentication and policy controls are performed via a compliant licensed Microsoft Server 2003 based on ISO, IEC, and Federal Security requirements.

Passwords are policy driven for rotation, history retention and complexity. All network attached workstations, servers, and hardware attached devices require mandated authentication internally and externally for all access requests. Audit logging is enabled and manages success / failure login services, policy changes, permissions requests, and production data access.

Source code is verified through Microsoft Visual Source Safe as the latest and current production and development code in use and stored offsite in case of critical failure. All code is checked in and out during development and verified by the IT Director and third party vendor for possible security risk scenarios.

Firewall configuration and integrity checks are performed quarterly by the Security Director as well as verified by our firewall partner, Watchguard. Firewall logging and audit services are performed on a secure, centralized logging server. Remote access has been instated via a 3-tier security policy of location, passwords and encryption. This exceeds all federal compliancy regulations.

Security Systems Logging

In accordance with Security Regulations, a central point of logging is established via a dedicated security server which monitors and tracks all network, file, and firewall activity. The security server is housed in a physically secure area with limited access reserved to the Security Director and a single backup resource.

Event Notification & Alarm

Alert and event features have been established and reviewed by the FOCUS1 Security Director and a third party view team. Notification features include power outage, production application events, e-mail events, and physical security alerts.