Explanation of RateSetter’s approach to website security, data storage, penetration testing, and includes 5 tips to improve the security of your personal data across the web.

1. RateSetter
web security
Updated July 2014
See the blog post here: http://www.ratesetter.com/blog/An_overview_of_RateSetter_web_security.htm

2. Organisations increasingly falling
victim to cybercrime
Citigroup
Businesses have suffered planned hijacks resulting in
compromised customer data
Ebay
Adobe
Facebook
Vodafone
AOL
Source: http://www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/

3. RateSetter’s
security approach

4. In-built security with
Microsoft’s .NET
framework

5. Security Function Description
Authentication
Helps to verify that the user is, in fact, who
the user claims to be. The application
obtains credentials (various forms of
identification, such as name and password)
from a user and validates those credentials
against some authority. If the credentials
are valid, the entity that submitted the
credentials is considered an authenticated
identity.
Authorization
Limits access rights by granting or denying
specific permissions to an authenticated
identity.

6. Actively maintained
server firewalls

7. Firewall: a software program
that helps screen out
hackers, viruses,
and worms

8. RateSetter is continually maintaining our
firewalls through
 batch updates
 manual configuration
to better shield from unwanted traffic
entering our website.

9. Advanced database
encryption

10. Our database has built-in data encryption for
passwords and is accomplished by means of
built-in system procedures.

11. Optional 2-step
authentication

12. In 2013 we introduced
and continue to
recommend the
option for all savers
to switch on
2-Step Verification
to increase the
security of the log-in
process to their
accounts.

13. Protecting hardware responsible for
delivering service and storing your data
RateSetter utilise two secure
web hosting data centres which
house thousands of the latest
web servers, maintained 24x7 by
an expert team of engineers.

14. Penetration testing to find
weaknesses
At RateSetter we want to
be a step ahead of the
game and seek 3rd party
penetration testing to
stage a controlled
“attack” on our systems.
These help identify the
areas we need to improve
to further secure your
data from hackers and
malicious software.

15. 5 tips to improve security across the web
1. Regularly change your passwords
2. Use 2-Step Verification wherever possible
3. Protect your computer with antivirus
software
4. Beware of phishing and email scams
5. Be careful what you download

16. We hope you’re reassured by
the security measures we take
now visit the website to learn more about how we
minimize risk!
www.RateSetter.com