Data residency
Where data is stored and processed is constrained to meet organisational and jurisdictional requirements.
Meridian · Data Security & Residency
Australian-region production infrastructure.Security controls, stated precisely.
Meridian production infrastructure runs on Microsoft Azure in Australian regions. Hosting, access, segregation, logging and deployment are agreed against client requirements during procurement.
Security controls
Six control areas.
The applicable controls are confirmed and documented during procurement.
Encryption
Data is encrypted in transit and at rest.
Environment segregation
Production, testing, training, advisory and transaction environments are separated.
Backup & recovery
Models, documents, configurations, audit records and approved outputs are backed up with defined recovery procedures.
Identity
Enterprise identity providers, single sign-on, multi-factor authentication and automated user lifecycle management are supported.
Administrative audit
User creation, permission changes, configuration changes, integration access, exports and security actions are recorded.
Deployment
Tailored to the client’s operating environment.
Deployment is configured against the client’s operating requirements and security standards.
01
Tenancy and isolation model
Define how client environments and controlled information are separated.
02
Access control and identity integration
Align authentication and access arrangements with the client’s identity environment.
03
Data-residency arrangements within Australia
Scope where the deployment’s data is stored and processed within Australian regions.
04
Logging and review evidence
Define the administrative and security evidence required for review and procurement.
Stated in writing before commitment. Tenancy, access, residency and logging are documented during procurement.
Procurement
Review the current architecture and control evidence.
Security review uses the deployment architecture and control evidence current at procurement. Hosting, access, data handling, residency and administrative controls are documented against the proposed deployment.
Security review
Discuss deployment and security requirements.
Send the hosting, access, data-residency and procurement requirements.