Skip to main content

Security Fundamentals

Security is a core principle of the sc.sb platform. This guide covers the fundamental security concepts, features, and best practices that protect your data and ensure safe access to services.

Security Architecture​

Multi-Layer Security​

sc.sb implements multiple layers of security:

  1. Authentication Layer - Microsoft Entra ID (Azure AD) integration
  2. Authorization Layer - Group-based access control
  3. Network Layer - Secure connections and VPN options
  4. Data Layer - Encryption and secure data handling
  5. Application Layer - Secure service interfaces

Zero-Trust Model​

The platform follows a zero-trust security model:

  • Never Trust, Always Verify - Every access request is authenticated and authorized
  • Least Privilege Access - Users only get access to what they need
  • Continuous Monitoring - All activities are logged and monitored
  • Dynamic Access Control - Permissions can be adjusted in real-time

Authentication and Access Control​

Microsoft Entra ID Integration​

Benefits:

  • Enterprise-grade authentication
  • Single Sign-On (SSO) capabilities
  • Multi-Factor Authentication (MFA) support
  • Centralized user management
  • Compliance with enterprise security policies

Security Features:

  • Password Policies - Enforced through your organization's Azure AD
  • Account Lockout - Protection against brute force attacks
  • Session Management - Automatic session timeout and renewal
  • Audit Logging - Complete authentication event tracking

Group-Based Access Control​

How It Works:

  • Each service corresponds to an Azure AD security group
  • Users are added to groups based on their role and needs
  • Access is automatically granted/revoked based on group membership
  • Administrators can manage access without platform intervention

Best Practices:

  • Regular access reviews and cleanup
  • Principle of least privilege
  • Separation of duties
  • Regular group membership audits

Network Security​

Secure Connections​

Connection Types and Security:

  1. External Connection - Basic HTTPS encryption
  2. Cloudflare WARP - Enterprise-grade VPN with encryption
  3. Local/Wi-Fi Roaming - Secure local network protocols
  4. sc Network - Direct encrypted connection to sc.sb infrastructure

VPN and Network Protection​

Cloudflare WARP Benefits:

  • End-to-end encryption
  • DNS over HTTPS (DoH)
  • Malware and phishing protection
  • Global network optimization
  • Automatic failover

Network Best Practices:

  • Always use secure connections when possible
  • Avoid public Wi-Fi for sensitive operations
  • Keep network credentials secure
  • Monitor connection status regularly

Data Protection​

Encryption​

Data at Rest:

  • All stored data is encrypted using industry-standard algorithms
  • Encryption keys are managed securely
  • Regular key rotation and management
  • Compliance with data protection regulations

Data in Transit:

  • All communications use TLS 1.3 encryption
  • Secure API endpoints with certificate validation
  • Encrypted file transfers and data synchronization
  • Protection against man-in-the-middle attacks

Data Privacy​

Privacy Principles:

  • Data Minimization - Only collect necessary data
  • Purpose Limitation - Use data only for stated purposes
  • Retention Limits - Automatic data cleanup and retention policies
  • User Control - Users can request data access and deletion

Service Security​

Service Isolation​

Security Boundaries:

  • Each service runs in isolated environments
  • Network segmentation between services
  • Resource isolation and limits
  • Independent security monitoring

Access Monitoring​

Real-Time Monitoring:

  • Service access logging and monitoring
  • Anomaly detection and alerting
  • Performance and security metrics
  • Automated threat response

Service Status Security​

Status Indicators:

  • Green - Service is secure and available
  • Orange - Service has security warnings or limitations
  • Red - Service is unavailable due to security or operational issues

User Security Responsibilities​

Account Security​

Password Management:

  • Use strong, unique passwords
  • Enable Multi-Factor Authentication (MFA)
  • Never share credentials
  • Report suspicious account activity

Session Security:

  • Always sign out when finished
  • Don't use shared computers for sensitive operations
  • Keep your browser updated
  • Clear browser data regularly

Data Handling​

Best Practices:

  • Only access data you're authorized to see
  • Don't download sensitive data to unsecured devices
  • Report data breaches or security incidents
  • Follow your organization's data handling policies

Security Monitoring and Compliance​

Audit Logging​

What's Logged:

  • All authentication events
  • Service access and usage
  • Administrative actions
  • Security-related events
  • Data access and modifications

Log Retention:

  • Logs are retained according to compliance requirements
  • Regular log analysis and monitoring
  • Automated alerting for suspicious activities
  • Integration with security information systems

Compliance​

Standards and Frameworks:

  • SOC 2 Type II compliance
  • ISO 27001 security management
  • GDPR data protection compliance
  • Industry-specific compliance requirements

Incident Response​

Security Incident Types​

Common Incidents:

  • Unauthorized access attempts
  • Suspicious user behavior
  • Data breaches or leaks
  • Service availability issues
  • Network security threats

Response Procedures​

If You Suspect a Security Issue:

  1. Immediate Action - Sign out and secure your account
  2. Report - Contact your administrator or security team
  3. Document - Record what you observed
  4. Follow Instructions - Cooperate with incident response procedures

Reporting Security Issues​

How to Report:

  • Contact your organization's security team first
  • Use official sc.sb support channels
  • Provide detailed information about the incident
  • Follow up as requested by security personnel

Security Best Practices​

For Users​

  • Strong Authentication - Use MFA whenever possible
  • Secure Connections - Always use recommended connection methods
  • Regular Updates - Keep your devices and software updated
  • Awareness - Stay informed about security threats and best practices

For Administrators​

  • Access Reviews - Regularly review and audit user access
  • Security Training - Provide security awareness training
  • Incident Planning - Have incident response procedures ready
  • Monitoring - Implement comprehensive security monitoring

For Organizations​

  • Security Policies - Establish clear security policies and procedures
  • Regular Audits - Conduct regular security assessments
  • Training Programs - Implement ongoing security education
  • Compliance Management - Ensure compliance with relevant regulations

Security Resources​

Getting Help​

  • Security Documentation - Comprehensive security guides and policies
  • Support Channels - Dedicated security support team
  • Training Materials - Security awareness and training resources
  • Best Practices - Regular updates on security recommendations

Staying Informed​

  • Security Updates - Regular security bulletins and updates
  • Threat Intelligence - Information about current security threats
  • Compliance Updates - Changes in security regulations and requirements
  • Feature Announcements - New security features and capabilities

Next Steps​

Security is everyone's responsibility. By following these fundamentals and best practices, you help maintain a secure environment for all sc.sb users.