Snapshot 72603
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Platform MarcomCentral MarcomCentral Core FusionPro Integrations View Pricing Solutions Brand Management Portal Organize all of your company’s key documents in one centralized hub Digital Asset Management Custom tagging and intuitive AI improves search and saves time Full Workflow Automation Connect your approval processes, marketing tools, and tech stack seamlessly Clear Compliance Ensure branded assets are compliant based on your industry standards Custom Dynamic Templates Empowering dispersed teams with on-demand customizable collateral Usage Analytics & Insights Get a clear picture of which marketing materials are working best Painless Collateral Distribution Make sure your field teams and dispersed locations have the collateral they need to do their jobs Industries Healthcare Manufacturing Hospitality Finance Food & Beverage Franchise Retail Education Non-Profit Insurance Print Service Provider Teams Sales Team Marketing Team Field Team Partner Programs Resources Insights Case Studies News Events & Webinars Security DAM | MarcomCentral MarcomGather Terms & Conditions EULA Privacy Security Legal Service Level Marcom Portal Terms & Conditions Privacy Security Legal Service Level Security Framework and Governing Policies The mission of the MarcomCentral® Information Security Management Systems (ISMS) Program is to support the company’s business priorities through a risk-based governance framework that leverages the synergy of people, process and technology. The policies that govern the ISMS program adhere to industry accepted frameworks such as the National Institute of Standards and Technology (NIST), the US-EU Privacy Shield, the Open Web Application Security Project (OWASP) and the International Organization for Standardization (ISO). While it is not judicious for us to detail every component that makes up our security posture, the goal of this Security brief is to provide you a glance into our defense-in-depth strategy. Cloud Security Overview MarcomCentral® has partnered with the Microsoft Azure Cloud Services to host the MarcomGather server environment. As part of the Microsoft Azure Cloud suite of services, the MarcomGather environment includes the security, access management, authentication, authorization, threat protection and encryption capabilities designed to uphold continuous protection of the confidentiality, integrity and availability of our customer’s processed data. For more details, please visit the Microsoft Azure Cloud Services documentation. Privacy & Compliance MarcomCentral® respects your privacy and we are committed to protecting it. We uphold the TRUSTe Verified Privacy Seal attestation of our compliance adherence with the Enterprise Privacy & Data Governance Practices Assessment Criteria, the General Data Privacy Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as data processor. For your convenience, the latest version of our Privacy Policy can be accessed from any browser via https://marcom.com/privacy-policy/ Access Logs MarcomCentral® understands that regular system and application log management is critical for establishing baselines, identifying operational trends and supporting audit review and security incident activities during active investigations and postmortem analysis. The MarcomCentral® administration tool empowers users that have been configured with administrator roles to view the event date and user associated with the following activities: Successful Portal or Admin Tool Logins, Failed Portal or Admin Tool Logins, Portal or Admin Tool User Logouts, Portal User Password Resets, Portal User Lockouts, Data Insertions, Data Updates, and Data Deletions. Application Development In furtherance of our commitment to taking great strides to uphold continuous protection of the confidentiality, integrity and availability of our customers data, the MarcomCentral® Software Development Lifecycle Program adheres to industry leading frameworks such as the Open Web Application Security Project (OWASP) and the Microsoft Security Development Lifecycle (SDL). The MarcomCentral® application development practices follow the Scrum methodology to implement Agile processes. Releases occur every sprint. A sprint is 2 weeks and consists of functionality and resolution of issues. Authentication The MarcomCentral® Distributed Marketing product supports SSO (single sign-on) for both the distributed marketing cloud-based platform and the Administration Tool. The SSO functionality provides our customers full control of their user community while enforcing their respective password requirements. MarcomCentral® also supports both Identity Provider and Service Provider Initiated SAML (Security Assertion Markup Language) as well as HTTPS (hypertext transfer protocol secure) redirect. Data Residency MarcomGather’s server environment is based in the US for our US customers. MarcomGather is a multi-tenant SaaS solution that segregates each customer’s processed data within their designated instance of the database. Decommissioning and Data Removal The MarcomCentral® Data Destruction Policy aligns with industry accepted frameworks and includes the use of disk sanitizing tools that wipe media overwriting every disk sector of the machine with zero-filled blocks, meeting Department of Defense directives. Further, the MarcomGather environment leverages the Microsoft Azure Cloud Services Data Destruction capabilities. Incident Response MarcomCentral® recognizes that while it is not feasible to anticipate and protect our environment from every possible cyber threat, the impact of a potential incident can be dramatically reduced by promptly detecting, identifying, containing, and eradicating the threat. The MarcomCentral® Cybersecurity Incident Response Plan (CIRP) is designed to guide our team to immediately contain, eradicate and recover in the event of a cyber intrusion or data breach. In adherence with industry best practices, if we were to suffer a cyber intrusion that in any way impacts our customer’s data processing activities, each customer will be promptly notified in accordance with our terms and contractual agreements. Back To Top