CLOUD SECURITY POLICY
-
Overview
-
S-BRO FUND MANAGERS (PTY) LTD, registration number (FSCA category 2: Nr: 41855) (Reg no: 1999/018626/07), (hereafter referred to as “S-BRO FUND MANAGERS (PTY) LTD”) is hosted and delivered by (https://www.xneelo.co.za) (hereafter referred to as “Cloud Provider”). While the Cloud Provider is responsible for the security of its actual data centres and hosting platforms, S-BRO FUND MANAGERS (PTY) LTD is responsible for managing, maintaining, and securing the website/s content, and registered user information (Client Information, Personal Information and Personally Identifiable Information).
-
A core focus of our Cloud Security Strategy aligns with our organisational Information Security Management System (ISMS) and focuses on the following key control areas. • Confidentiality – Data is only accessed by those with the right to view the data. • Integrity – Data can be relied upon to be accurate and processed correctly. • Availability – Data can be accessed when needed.
-
Facilities and Architecture
-
The S-BRO FUND MANAGERS (PTY) LTD Corporate Website and S-BRO FUND MANAGERS (PTY) LTD Online Store are designed for redundancy and the expectation that failures will happen. Our websites and applications are stored in secure environments, completely managed by a first-class cloud vendor DiaMatrix Pty Ltd.
-
The Cloud Provider is responsible for the data centres that host the S-BRO FUND MANAGERS (PTY) LTD Corporate Website and S-BRO FUND MANAGERS (PTY) LTD Online Store. For more information about security at those data centres, please go to the appropriate links below:
-
S-BRO FUND MANAGERS (PTY) LTD Corporate Website and S-BRO FUND MANAGERS (PTY) LTD Online Store are currently hosted in South Africa (https://www.xneelo.co.za/contact).
-
Certification
-
The Cloud Provider is responsible for managing the security of the cloud. They have been certified by third-party organisations and are compliant with the applicable laws and regulations. The list of such certifications and compliance statements can be found in the links below: https://www.xneelo.co.za/accreditations
-
S-BRO FUND MANAGERS (PTY) LTD Corporate Website and S-BRO FUND MANAGERS (PTY) LTD Online Store are subject to strict information security assessments, conducted by independent third parties, to ensure compliance with security standards such as the Open Web Application Security Project (OWASP) Application Security Verification Standard (ASVS) before public release.
-
Data Storage
-
Access to data at rest is cryptographically secured using industry-standard encryption. Additionally, all communications with the S-BRO FUND MANAGERS (PTY) LTD Corporate Website and S-BRO FUND MANAGERS (PTY) LTD Online Store are protected with HTTPS using TLS.
-
Data Backups
-
Customer data is backed up daily and stored in an encrypted state.
-
Data Retention
-
Customer information and data (S-BRO FUND MANAGERS (PTY) LTD Online Store) is retained indefinitely while you are our customer. In the event that you opt to deregister as a user/customer from the S-BRO FUND MANAGERS (PTY) LTD Online Store, one month later your data is moved into a secure storage archive and removed from the production database. As a part of our effort of not storing unnecessary data too long, the data is then removed from the archive when one year has passed from you deregistering as a user/customer from the S-BRO FUND MANAGERS (PTY) LTD Online Store.
-
People and Access
-
Within S-BRO FUND MANAGERS (PTY) LTD, only a few trusted members of our web development team have access to the production environment for the purposes of maintaining our cloud services and assisting our customers. Additionally, we monitor all access to the S-BRO FUND MANAGERS (PTY) LTD Corporate Website and S-BRO FUND MANAGERS (PTY) LTD Online Store.
-
Customers are responsible for maintaining the security of their own login information.
-
Information Security Incident Management
-
Every care is taken by S-BRO FUND MANAGERS (PTY) LTD to protect personal data from incidents (either accidentally or deliberately) to avoid a data protection breach that could compromise security.
-
8.1 Definition An incident in the context of this Cloud Security Statement is an event or action which may compromise the confidentiality, integrity or availability of systems or data, either accidentally or deliberately, and has caused or has the potential to cause damage to the company’s information, assets and/or reputation.
-
An incident includes but is not restricted to, the following: • Loss or theft of confidential or sensitive data or equipment on which such data is stored. • Attempts (failed or successful) to gain unauthorised access to information or system(s) • Unauthorised disclosure of sensitive/confidential data • Human error
-
8.2 Overview of Information Security Response Plan The S-BRO FUND MANAGERS (PTY) LTD information security incident response plan consists of the following: • Confirm the Incident. • Contain the Incident. • Assess Risks and Impact. • Report the Incident. • Resolve the Incident and provide a post-mortem report.
-
Privacy
-
In line with the Protection of Personal Information Act 4 of 2013, S-BRO FUND MANAGERS (PTY) LTD understands the importance and is committed to ensure the privacy of your personally identifiable information. For more information, please see our Privacy Policy.
-
Reporting Issues
-
At S-BRO FUND MANAGERS (PTY) LTD we take any reports of vulnerabilities seriously. If you encounter a security issue with any of our online services, please report it to reception@s-bro.co.za. We have an internal SLA for responding to such issues and are committed to addressing security issues promptly.
-
Please note that it is against our Information Security Policy to run automated security scanning tools against our system without prior approval.
-
Facebook-f Twitter Instagram Linkedin-in Youtube
-
QUICK LINKS Account Application About Us Services Media Careers Financial Statements
-
HEAD OFFICE: Paul Laesecke Laan 14, Panorama, Bethlehem, 9701, South Africa,
-
Tel: (058) 303 0450
-
Email: reception@s-bro.co.za
-
HEAD OFFICE BUSINESS HOURS Monday – Friday: 08:00 – 17:00
-
Saturday: Closed
-
Sunday: Closed
-
© 2023 S-BRO FUND MANAGERS (PTY) LTD. All rights reserved. Website by Warp Development. Terms & Conditions Privacy Policy Cloud Security Policy PAIA & POPI Manual
S-BRO FUND MANAGERS (PTY) LTD (FSCA category 2: Nr: 41855) (Reg no: 1999/018626/07)
© 2018 by S-Bro. Proudly created by PIXILLUSIONS