INFORMATION PROTECTION AND SECURITY STANDARDS

INFORMATION PROTECTION AND SECURITY STANDARDS

TBD Technical

information

Physical aboutSecurity

the

The Forma Cloud infrastructureServices relies on AWS who is responsible, in accordance with the AWS Shared Responsibility
Model (available at https://aws.amazon.com/compliance/shared-responsibility-model), for implementing controls for
the physical security of data center facilities, backup media, and other physical systems, providing comprehensive and
state-of-the-art security capabilities (available at https://aws.amazon.com/compliance/data-center/controls).

Forma Farm ensures that such physical security controls provided by AWS for its data center include:

Access is restricted by using an electronic key card and/or biometric system, which is unique to each individual. CCTV is present on all access and exit doors, and recordings are stored for at least thirty 30 days. Access areas to the building are guarded by security on a 24/7 basis, 365 days a year, either by internal or externalstaff. An intruder alarm is in place for all building access points to detect and alert against unauthorized entry. Access to the location of the servers and network components that deliver Services, i.e., servers, dialers, switches,routers, firewalls, etc., are restricted to authorized personnel only and adequately logged.

Backup