{"id":18477,"date":"2023-12-06T11:27:13","date_gmt":"2023-12-06T19:27:13","guid":{"rendered":"https:\/\/threecloud.wpengine.com\/?page_id=18477"},"modified":"2024-03-27T13:00:40","modified_gmt":"2024-03-27T20:00:40","slug":"trust-center","status":"publish","type":"page","link":"https:\/\/3cloudsolutions.com\/trust-center\/","title":{"rendered":"Trust Center"},"content":{"rendered":"
\r\n\r\n
\r\n\r\n
\r\n\r\n \r\n
\r\n\r\n
\r\n
\r\n

3Cloud Security Lifecycle<\/h3>\n

3Cloud follows strict standards and procedures in designing and implementing its security controls to protect the confidentiality, integrity, and availability of our data, corporate assets, processes, and technologies.<\/p>\n <\/div>\r\n <\/div>\r\n\r\n

\r\n
\r\n
\"3Cloud<\/div>

Built by Experts<\/p>

3Cloud Security Engineers, Systems Administrators, and Compliance Specialists collaborate to harden 3Cloud’s environment, while empowering 3Clouders to work securely and efficiently.<\/p>\n<\/div><\/div><\/div><\/div>

\"3Cloud<\/div>

Designed by Experts<\/p>

3Cloud security and compliance professionals follow guidelines from NIST, CIS, and data privacy and protection legal counsel when architecting its policies and controls.<\/p>\n<\/div><\/div><\/div>

\"\"<\/div>

Validated by Experts<\/p>

3Cloud personnel work with Microsoft Security experts, penetration testers, auditors, legal firms, and other professionals to validate policies and controls. Improvements feed back into the design phase.<\/p>\n<\/div><\/div><\/div><\/div> <\/div>\r\n <\/div>\r\n\r\n <\/div> \r\n\r\n \r\n <\/div> \r\n\r\n <\/div> \r\n\r\n <\/section>

\r\n\r\n
\r\n\r\n
\r\n\r\n \n\n
\n
\n

Validation by Experts<\/h3>\n <\/div>\n <\/div>\n\r\n
\r\n\r\n

\"Data<\/p>\n

Data protection<\/h4>\n

Protecting your privacy is of paramount importance to us. Therefore, we do not share customer details with any third parties.<\/p>\n<\/div><\/div><\/div>

\"Data<\/p>\n

SOC 2 Report<\/h4>\n

Our SOC 2 Type 2 report certifies 3Cloud’s controls for security, availability, integrity, and confidentiality. Available under an NDA for prospective clients upon request.<\/p>\n

REQUEST REPORT<\/a><\/p>\n<\/div><\/div><\/div>

\"Trusted<\/p>\n

cloud penetration test<\/h4>\n

TrustedSec’s report delves deep into our cloud security highlighting vulnerabilities, risk mitigation and security measures.<\/p>\n

VIEW ATTESTATION<\/a><\/p>\n<\/div><\/div><\/div>\r\n <\/div> \r\n\r\n <\/div> \r\n\r\n <\/div> \r\n\r\n <\/section>

\r\n\r\n
\r\n\r\n
\r\n\r\n \n\r\n
\r\n

\"\"<\/p>\n

Information Security Statement<\/h2>\n

November 2023<\/p>\n

Overview<\/h3>\n

3Cloud is a team composed of industry-leading minds and problem solvers who launch organizations into the cloud\u2014delivering the ultimate Azure experience. Our laser-focused Azure experts have been entrusted by over 500 clients across the United States to architect solutions that meet their needs. Cloud environments introduce unique security and privacy challenges that we can help you overcome.<\/p>\n

The purpose of this statement is to list the pillars of security and privacy 3Cloud incorporates in its environment. As we aim to be a security and privacy leader in the Azure consulting space, we work passionately and efficiently to fortify the confidentiality, integrity and availability of treasured assets. In this statement, we explain the security principles that guide 3Cloud.<\/p>\n

\n

Business Overview<\/h3>\n

3Cloud is a cloud-based organization. Our operations rely on third-party software-as-a-service (SaaS) applications and service to communicate, store data, manage resources and deliver our expertise.<\/p>\n

3Cloud provides Professional and Managed Services, which are conducted in client environments, and does not provide environments to its clients. Moreover, data collected and stored by 3Cloud includes business contact information and other information required to fulfill its contractual obligations with its clients, such as project artifacts.<\/p>\n

Please refer to our Privacy Policy<\/a> for more about data collection, management, rights and more.
\n\"\"<\/p>\n

Personnel Security<\/h3>\n

Background Checks<\/h4>\n

3Cloud has a strict and extensive adjudication process for new hires, which is completed prior to the candidate\u2019s start date. All 3Clouders undergo background checks at the global and national levels. These checks include social security number (SSN), sex offender lists and monitoring of global watchlists & criminal activity. For contractors, letters of attestation are verified by 3Cloud Human Resources.<\/p>\n

Physical Security<\/h4>\n

Access to 3Cloud offices is approved by management at the time of hire, and reviewed annually and as needed to ensure continuing access is authorized.<\/p>\n

Keyed locks, electronic access systems, cameras, alarmed entry and exit doors, required reporting of lost or stolen access tokens, restricted access areas and logging have been implemented to protect offices.<\/p>\n

Badges are assigned to employees who live within close proximity of 3Cloud offices and deprovisioned within 24 hours should an employee decide to move on from 3Cloud. Guest badges are assigned and revoked when no longer needed. Guests are required to wear unique badges while visiting our facilities.<\/p>\n

3Cloud Business Systems retains access logs for at least 90 days and monitors alerts as needed.<\/p>\n

Security Awareness Training<\/h4>\n

All 3Cloud personnel must undergo security awareness training upon hire and annually thereafter.<\/p>\n

Training involves video modules, quizzes, simulated and adaptive phishing engagements, and remedial training. Training topics include security awareness, data privacy and protection, remote work security, artificial intelligence security, diversity and inclusion and sexual harassment prevention.<\/p>\n

Security posters containing best practices and common scam notifications are routinely distributed.<\/p>\n

\"\"<\/p>\n

Compliance<\/h3>\n

Cloud Access Security Broker (CASB)<\/h4>\n

3Cloud makes use of a CASB to add an additional layer of protection to its endpoints and cloud operations. A CASB enforces security policies across applications and devices to assist with:<\/p>\n