Security

BCI's client list includes many Fortune 500 companies and for them to do business with us, data availability, reliability and security (physical and electronic), are essential.  The ICMS delivery approach has been heavily scrutinized by some of the world's largest organizations and we are pleased to report that we have passed all IT security audits to the satisfaction of our clients.    

Our technology is hosted at Q9 Networks' highly secure data center.  They are Canada's leading provider of outsourced internet infrastructure and managed hosting services for companies with mission-critical internet operations.  The Q9 Networks data centres provide highly secure physical infrastructure, including the latest in biometric authentication, video surveillance, and round-the-clock security officers, while at the same time permitting unannounced 7x24 customer access. The data centres are engineered to eliminate any single point of failure, with multiple layers of redundancy in power systems, HVAC, fire detection and suppression. All systems are monitored 7x24.

Authentication

ICMS offers a secure, efficient, and scalable means of communicating with clients over the internet. There is no direct access to ICMS internal business logic or client data from the internet. Instead, all users must be authenticated on the Web Server, which implements strong 128 bit encryption and industry standard authentication.  The Web Server then brokers requests for data to the Application Server, which in turn retrieves authorized content from the Database Server. Separate authentication occurs at the firewall, the internet server and the application server. The architecture embraces all security capabilities found in the leading-edge Linux operating system and Java 2 Enterprise Edition application environments.

Easy Enhancements

All servers implement a redundant array of disks (RAID-5), which allow for failure protection of any single storage unit on each server. In addition to fault tolerance, this mechanism also substantially improves performance in an area that could otherwise be a performance bottleneck.  Additional web servers can be seamlessly added to the network with no downtime and in a manner which is completely invisible to the customer. Similarly, heavily used application modules can be offloaded to dedicated servers for optimal performance.