ISAE 3000 Assurance Validates Secure Operating Environment of Company’s inSync Cloud Solution

Mountain View, Calif. – June 18, 2012 – / – Druva, a leader in enterprise endpoint backup with integrated mobile access, data loss prevention, and data analytics, today announced that it has recently completed an Assurance Engagement in compliance with the International Standard on Assurance Engagements (ISAE) 3000 for its inSync Cloud solution. The Type 1 audit was performed by KPMG, an internationally recognized, independent auditing firm. The scope of the report included a description of the general operating environment that supports the delivery of Druva’s inSync Cloud solution and the design of controls related to the control objectives stated in the description.

To complete the audit, Druva management developed control objectives that were determined to be important for providing a secure environment for endpoint cloud backup. The control objectives covered the following areas:

Druva inSync Cloud Solution and Operations:

  • Logical access
  • Security of customer data
  • Network security
  • Application deployment

Support Functions:

  • Information security
  • Human resources
  • Physical access
  • Environmental controls

In evaluating the control objectives, the audit ensured that Druva provided a complete and accurate description of how the system was designed and implemented. Examples of the evaluated descriptions include the types of services provided, relevant control objectives and the controls designed to achieve those objectives, and the ways in which controls were administered. The audit then ensured that controls related to the objectives were suitably designed, so the risks that threatened achievement of the control objectives were identified.

Below is a description of a few of the key findings of the audit:

Risk Assessment
Druva has an Information Security Group (ISG) in place to drive the initiatives related to information security. The ISG is responsible for the annual review and approval of information-security policy standards, procedures and other guidance. The ISG meets at least quarterly to review the current status of information security within the organization, monitor material security incidents, approve significant information-security policy changes and perform other information-security stewardship activities as necessary.

Most Secure Cloud Environment for Enterprise Endpoint Backup
The inSync Cloud solution brings together several advanced capabilities to provide the most secure operating environment for customer data.

inSync Cloud protects customer data at rest and during transmission. The inSync client installed on the end-user device is required to be authenticated by the one-time authentication key generated during the user setup process. Backup data is protected by 256-bit SSL encryption during transmission and protected at rest using 256-bit AES encryption. Druva’s unique encryption-key management works like a bank locker system to create unique encryption keys for every customer. No one, including Druva, can gain access to a customer’s encrypted data except the customer that has access credentials.

In addition, inSync Cloud offers single sign-on capabilities through Security Assertion Markup Language (SAML), an XML-based open standard for exchanging authentication and authorization data between security domains. This feature permits users to securely log into inSync over the Web using their credentials on external identity services, including a company’s Microsoft Active Directory, with double-factor authentication.

“We recognize that the most important asset an enterprise has is its data, and many enterprises are skeptical of storing it in the cloud due to the lack of security controls,” said Jaspreet Singh, CEO of Druva. “Druva is committed to offering the most robust and secure enterprise data-protection solutions possible so our customers can take advantage of the many benefits of the cloud, while having the peace of mind that their data is fully protected.”

About Druva
Druva inSync is the only enterprise solution that offers a full suite of endpoint protection including award-winning backup, file sharing & collaboration, plus data loss prevention across all endpoints including laptops, PCs, smart phones, and tablets. InSync is the only solution built with both IT and end-user experiences in mind. IT gets the peace of mind that corporate data on endpoints is safe, secure and compliant. End users get the ability to access their data from any device any time and share files with coworkers. Druva has over 1,250 customers and protects over 900,000 endpoints across 42 countries. With offices in the United States, India and the United Kingdom, Druva is privately held and backed by Nexus Venture Partners and Sequoia Capital.

Information on Druva is available at

Justin Gillespie
Trainer Communications

Sonia Mansata
Text 100 Mumbai
+91 22 61 37 90 30

General Tags: data security, SaaS, online backup reviews, online backup, compare online backups, online backup providers directory, top rated online backups, online file storage, online data backup, online backup companies, cloud computing, CEO interviews, online backup news, backing up online, online file backup, online backup services, software as a service, data storage

Like us on Facebook

Do you like this post? Subscribe to our RSS feed ===========================


Related posts:

  1. Druva Extends Market Leadership with Record Growth in Cloud Data Protection and Management
  2. Druva Recognized for Industry-Leading Leadership and Technology
  3. Druva Extends Leading Endpoint Availability and Governance Solution to Cloud Data with Microsoft Office 365 Integration
  4. Druva Delivers Cloud-Scalable Backup/File Sharing to Enterprise Datacenters with New OpenStack-Based inSync Deployment Option
  5. Druva inSync Named Finalist for Cloud Storage & Backup in CODiE Awards
  6. Druva Partners with SmartOffice to Stream Secure Document Viewing to inSync Share
  7. Druva Adds Multi-Destination Backup to inSync Private Cloud for High Availability
  8. Druva inSync Named Best Cloud Storage & Backup Solution in CODiE Awards
  9. Druva Extends Comprehensive Data Protection and Governance Capabilities to Microsoft SharePoint Online
  10. Druva inSync Cloud Meets HIPAA Requirements for Public Cloud Security