# Cyber Security

## Why settle when you can have the best of **both**

**Experts With Integrity**  
**Analytical Problem Solvers**  
We understand your data is important and confidential and deserves to be treated that way.  
We work every day to constantly improve our security footprint.

## **Corporate Governance**  
#### SSAE SOC 1, 2 Type II Audit

#### COSO Risk Assessment

#### Corporate Compliance  
We understand you have Corporate Compliance needs - we work with your teams to complete internal annual assessments.

#### Corporate Training  
Industry Best Practices around Info / Cyber Security

#### Data Privacy  
Your data (and your clients’ data) is confidential. We don’t monetize, re-sell, or use it for benchmarking or AI training. It's that simple.

## **Secure Software Development Life Cycle (SSDLC)**
#### Intentional Design
#### Risk Assessment
#### Threat Modeling
#### Secure Design Review
#### Secure Coding Training
#### Static Code Analysis
#### Dynamic Application Testing
#### Industry Recognized 3rd Party Penetration Testing

## **Secure Hosting**
AWS Multi-AZ / Multi Region  
#### Redundant and Resilient 99.999% Uptime  
#### Adopted AWS Best Practices  
#### Hosted with AWS  
The Rockport Systems are hosted with Amazon Web Services (AWS). Both Rockport and AWS are SSAE SOC 1, 2 Type II Compliant - that's a fancy way of saying that, with Rockport, your data is hosted in a secure, reliable way available, with 24x7x365 / 99.999% Uptime.

## **Secure Authentication**
#### Industry Lead Authentication Platform
#### Supports Single Sign-On
You control your user's identity management.

## **Application Role Based Permissions**
#### Connect securely from anywhere
Your data is encrypted in transit and at rest. Read/write access is client-defined at the individual user or user group level - which includes internal users as well as third parties.