Whistleblower - Revision history

Tvi: 68 revisions imported

2021-12-10T10:56:06Z

68 revisions imported

← Older revision

Revision as of 12:56, 10 December 2021

80.161.14.74: /* Hosting Setup */

2021-11-16T15:49:42Z

Hosting Setup

← Older revision		Revision as of 17:49, 16 November 2021
Line 14:		Line 14:

	* SSL certificates are automatically updated monthly from LetsEncrypt		* SSL certificates are automatically updated monthly from LetsEncrypt
	* UptimeRobot polls the server each minute checking		* UptimeRobot polls the server each minute checking: Access to database, Storate- and RAM-sufficiency
	** Access to database		* Database is dumped nightly, replicated to encrypted storage in EU
	** Sufficient storage and RAM
	* Database is dumped nightly
	** Replicated to encrypted storage in EU
	* Office365 SMTP service for sending emails		* Office365 SMTP service for sending emails

80.161.14.74: /* Hosting Setup */

2021-11-16T15:46:11Z

Hosting Setup

← Older revision		Revision as of 17:46, 16 November 2021
Line 19:		Line 19:
	* Database is dumped nightly		* Database is dumped nightly
	** Replicated to encrypted storage in EU		** Replicated to encrypted storage in EU
	** Rentention daily 60 days, monthly 2 years
	* Office365 SMTP service for sending emails		* Office365 SMTP service for sending emails

80.161.14.74: /* Technology Stack */

2021-11-16T15:44:21Z

Technology Stack

← Older revision		Revision as of 17:44, 16 November 2021
Line 30:		Line 30:
	* MySQL		* MySQL
	* Amazon Linux 2		* Amazon Linux 2

			== Backup ==
			Backups are securely stored in a redundant environment. Data is stored in encrypted form and adequate measures enable recovery in case of system failure or interruption. The environment is backed up as follows:
			*'''A) Daily''' full server backups, stored for 30 days, after which they are overwritten.
			*'''B) Monthly''' full server backups, stored for 3 months, after which they are overwritten.

			The purpose is to ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.

	== Security Setup ==		== Security Setup ==

80.161.14.74: /* Backup */

2021-11-16T15:44:15Z

Backup

← Older revision		Revision as of 17:44, 16 November 2021
Line 21:		Line 21:
	** Rentention daily 60 days, monthly 2 years		** Rentention daily 60 days, monthly 2 years
	* Office365 SMTP service for sending emails		* Office365 SMTP service for sending emails

	~~== Backup ==~~
	Backups are securely stored in a redundant environment. Data is stored in encrypted form and adequate measures enable recovery in case of system failure or interruption. The environment is backed up as follows:
	*'''A) Daily''' full server backups, stored for 30 days, after which they are overwritten.
	*'''B) Monthly''' full server backups, stored for 3 months, after which they are overwritten.

	The purpose is to ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.

	== Technology Stack ==		== Technology Stack ==

80.161.14.74: /* Backup */

2021-11-16T15:42:36Z

Backup

← Older revision		Revision as of 17:42, 16 November 2021
Line 27:		Line 27:
	*'''B) Monthly''' full server backups, stored for 3 months, after which they are overwritten.		*'''B) Monthly''' full server backups, stored for 3 months, after which they are overwritten.

	~~LES will~~ ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.		The purpose is to ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.

	== Technology Stack ==		== Technology Stack ==

80.161.14.74: /* Backup */

2021-11-16T15:42:01Z

Backup

← Older revision		Revision as of 17:42, 16 November 2021
Line 24:		Line 24:
	== Backup ==		== Backup ==
	Backups are securely stored in a redundant environment. Data is stored in encrypted form and adequate measures enable recovery in case of system failure or interruption. The environment is backed up as follows:		Backups are securely stored in a redundant environment. Data is stored in encrypted form and adequate measures enable recovery in case of system failure or interruption. The environment is backed up as follows:
	A) Daily full server backups, stored for 30 days, after which they are overwritten.		*'''A) Daily''' full server backups, stored for 30 days, after which they are overwritten.
	B) Monthly full server backups, stored for 3 months, after which they are overwritten.		*'''B) Monthly''' full server backups, stored for 3 months, after which they are overwritten.

	LES will ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.		LES will ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.

80.161.14.74: /* Hosting Setup */

2021-11-16T15:41:24Z

Hosting Setup

← Older revision		Revision as of 17:41, 16 November 2021
Line 21:		Line 21:
	** Rentention daily 60 days, monthly 2 years		** Rentention daily 60 days, monthly 2 years
	* Office365 SMTP service for sending emails		* Office365 SMTP service for sending emails

			== Backup ==
			Backups are securely stored in a redundant environment. Data is stored in encrypted form and adequate measures enable recovery in case of system failure or interruption. The environment is backed up as follows:
			A) Daily full server backups, stored for 30 days, after which they are overwritten.
			B) Monthly full server backups, stored for 3 months, after which they are overwritten.
			LES will ensure that Recovery Point Objective and Recovery Time Objective for environments are 24 hours where possible. For data recovery older than 60 days, a time frame of at least 72 hours is required.

	== Technology Stack ==		== Technology Stack ==

80.161.14.74: /* Hosting Setup */

2021-11-16T15:35:06Z

Hosting Setup

← Older revision		Revision as of 17:35, 16 November 2021
Line 13:		Line 13:
	The LES Whistleblower Portal is hosted by Amazon Webservices EC2 in the data center in Stockholm, which complies with the following standards PCI DSS 3.2 Level 1 Service Provider, FIPS 140-2, ISO 27001. The server is protected by 2 layers of firewalls and utilizes the following supported services:		The LES Whistleblower Portal is hosted by Amazon Webservices EC2 in the data center in Stockholm, which complies with the following standards PCI DSS 3.2 Level 1 Service Provider, FIPS 140-2, ISO 27001. The server is protected by 2 layers of firewalls and utilizes the following supported services:

	* SSL certificates are automatically updated monthly from ~~LetEncrypt~~		* SSL certificates are automatically updated monthly from LetsEncrypt
	* UptimeRobot polls the server each minute checking		* UptimeRobot polls the server each minute checking
	** Access to database		** Access to database

80.161.14.74: /* Application */

2021-11-16T15:34:35Z

Application

← Older revision		Revision as of 17:34, 16 November 2021
Line 1:		Line 1:
	== Application ==		== Application ==
	The LES ~~Whistlebloaer Portal~~ is fully managed by Tempus Serva ~~Aps~~.		The LES Whistleblower Platform is fully managed by Tempus Serva ApS.

	The system supports the following roles and usecases		The system supports the following roles and usecases
			* Case Triager: Assignes cases to applicable lawyer
	* Lawyer: Handles whistleblower cases		* Lawyer: Handles whistleblower cases
	* Tenant user: Handles whistleblower cases		* Tenant user: Handles whistleblower cases
	* Whistleblower: Anonoumous users that creates new cases		* Whistleblower: Anonoumous users that creates new cases

	Whistleblower ~~have~~ the option to return to ~~their~~ case using a randomized code.		Whistleblower has the option to return to his/her case, using a randomized code generated during the report process.

	== Hosting Setup ==		== Hosting Setup ==