Internal and external focus
At Portbase, a full-time information security manager is responsible for all matters involving security. Portbase is also chair of the Port ISAC, through which public and private parties exchange information and experiences concerning threats to cybersecurity and vulnerabilities in the port community. In this way, we work towards optimum security of the complete logistical chain. Portbase commissions an independent security audit of its own organisation each year. We also strive, through internal campaigns, to keep our employees especially alert to online security risks and threats. All new employees are screened before starting work.
Reliable
Portbase’s hosting partner is in full compliance with ISO-27000: the global standard for information security. In order to ensure continuity of service, Portbase operates from two different locations. What’s more, all essential components have dual-modular redundancy. These two data centres are connected via a double fibre-optic connection. Each of them has its own connection to the Internet, again in duplicate. All data from the PCS is actively logged at one location and synchronised with a stand-by database at the other location. This means that if there is a problem at one of the locations, or with one of the system components, the PCS (including all data) will be able to continue functioning as usual. In the unlikely event that, despite these measures, the PCS should shut down wholly or in part, emergency procedures will go into effect following consultation. These procedures will allow you to continue working as usual.
Secure Connections
You can make use of the services in the PCS via a Web or System Interface, or a combination of both. When using a Web Interface – the Internet – your information exchange will be conducted automatically via an HTTPs connection. The ‘s’ of HTTPs stands for ‘secure’: this means that your data will be sent in encrypted form.
If you are working with a System Interface, you can choose a connection from among three secure options: sFTP, AS2 and HTTPs. We will be pleased to help you decide which type of secure connection best meets your needs.
Multiple layers of security are in place within the PCS. Information is visible only to those in certain roles (need-to-know basis). Following a period of inactivity in the PCS, an automatic time-out will result.
What can you do yourself?
There is also a lot you can do yourself to make your use of the Port Community System as secure as possible. A few useful tips are provided below.
Questions?
If you have any questions about Portbase’s security policy or about the security of the Port Community System, please contact our Service Desk at servicedesk@portbase.com or +31 088 – 625 25 25.