Benefits Communication

Peace of mind SECURITY

Security is at the heart of what we do at the BORIS offices. Looking at other online providers, it is shocking how unsecure a lot of them are. Determined not to follow in their footsteps, we have taken every precaution to ensure your data is safe.

 

The following is true for the portal domain (portal.benefitscommunication.co.uk).

 

 

bencom-security

Cyber Essentials Plus

We’re especially proud of our Cyber Essentials Plus accreditation. This is a set of comprehensive tests carried out by an external certifying body, using a range of tools and techniques.

Penetration testing

We’ve undergone thorough penetration testing by a fully accredited and authorised cyber essentials firm to ensure we have the best defences in place to prevent anyone attempting to break into our servers.

Servers

We’ve chosen Rackspace to host our servers. This means our servers and your data is stored alongside the servers that power the world’s biggest and most renowned internet companies.

Encryption

All company and employee information is encrypted in transit and on our servers, is authenticated using AES_128_GCM and uses ECDHE_ECDSA as the key exchange mechanism.

Backup

All company information is backed up on a monthly basis to ensure your data is always safe and recoverable. Our backups are also encrypted to ensure maximum protection for your data.

2 Factor Authentication (2FA)

BORIS enables you to set up 2FA when logging in to your BORIS portal which we strongly encourage. This means a code generated on your mobile device is needed to log in as well your username and password. This provides an additional banking grade security layer to protect your data from unauthorised access.

HTTPS/SSL

The Employer and Employee portals are encrypted far beyond the level of most other cloud portals and with the latest TLS (Transport Layer Security) mechanisms which we regularly update. We’re proud of our A+ rating on Qualys SSL Labs.

We’re certified with Secure Site Pro with EV SSL which is the most secure and highest performing choice for website security, with strong visual trust indicators and added assurance for business continuity.