Information Security Manager
At Portbase, a full-time information security manager is responsible for all matters involving security.
Security audit
An independent security audit of our organisation is conducted each year.
ISO-27001 certified
Portbase is ISO-27001 certified for the Port Community System and the underlying IT processes and systems. Dual implementation of the PCS
The PCS operates from two different locations; all essential components have dual-modular redundancy. This means that if there is a problem at one location, the PCS (including all data) will continue to function as usual.
Secure connections
We operate using secure connections for both the Web and System Interfaces.
Internal and external focus
At Portbase, a full-time information security manager is responsible for all matters involving security. In this way, we work towards optimum security of the complete logistical chain. Portbase commissions an independent security audit of its own organisation each year. We also strive, through internal campaigns, to keep our employees especially alert to online security risks and threats. All new employees are screened before starting work.
Reliable
Portbase’s hosting partner is in full compliance with ISO-27000: the global standard for information security. In order to ensure continuity of service, Portbase operates from two different locations. What’s more, all essential components have dual-modular redundancy. These two data centres are connected via a double fibre-optic connection. Each of them has its own connection to the Internet, again in duplicate. All data from the PCS is actively logged at one location and synchronised with a stand-by database at the other location. This means that if there is a problem at one of the locations, or with one of the system components, the PCS (including all data) will be able to continue functioning as usual. In the unlikely event that, despite these measures, the PCS should shut down wholly or in part, emergency procedures will go into effect following consultation. These procedures will allow you to continue working as usual.
Secure Connections
You can make use of the services in the PCS via a Web or System Interface, or a combination of both. When using a Web Interface – the Internet – your information exchange will be conducted automatically via an HTTPs connection. The ‘s’ of HTTPs stands for ‘secure’: this means that your data will be sent in encrypted form.
If you are working with a System Interface, you can choose a connection from among three secure options: sFTP, AS2 and HTTPs. We will be pleased to help you decide which type of secure connection best meets your needs.
Multiple layers of security are in place within the PCS. Information is visible only to those in certain roles (need-to-know basis). Following a period of inactivity in the PCS, an automatic time-out will result.
What can you do yourself?
There is also a lot you can do yourself to make your use of the Port Community System as secure as possible. A few useful tips are provided below.
Questions?
If you have any questions about Portbase’s security policy or about the security of the Port Community System, please contact our Service Desk at servicedesk@portbase.com or +31 088 – 625 25 25.
