Security Trust Center
Lorem Ipsum donec arcu cursus in lacus orci tellus. Lacus curabitur etiam ornare eget leo id at. A arcu id fusce tristique pretium vulputate interdum pretium quis.
Optional Sidebar Heading Text
-
SOC 2 Type II
-
Lorem Ipsum
S2SCORE
816.08
Excellent
Controls
Organizational security
Information Security Program \ Security Policy Manual
vCISO
Product security
Customer Identity and Access Management
Web Application Firewall
Internal security procedures
Disaster Recovery Plan
Vulnerability Notification from Reputable Sources (i.e. CISA newsletter)
Infrastructure security
Cloud Based and On-Premise Firewalls
IDS \ IPS
Network Segmentation
2 more Infrastructure security security controls
Subprocessors
Blackbaud • Accounting System
Product Suite
Submittable • Platform Provider
Product suite
JPMorgan Chase • Check Processing
TEST
Product Suite Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat
Microsoft Azure • Infrastructure Hosting
Product Suite
1 more Subprocessors
Controls
Organizational security
| Control | Status |
|---|---|
|
Information Security Program \ Security Policy Manual The company has a guiding set of security policies and program in place to manage those policies |
|
|
vCISO The company is guided by an individual with significant experience and certification |
Product security
| Control | Status |
|---|---|
|
Customer Identity and Access Management The company uses a CIAM system on its core student platform |
|
|
Web Application Firewall The company has web application firewalls protecting its external facing web applications
|
Internal security procedures
| Control | Status |
|---|---|
|
Disaster Recovery Plan An organizational disaster recovery plan is in place with defined RTO and RPO. |
|
|
Vulnerability Notification from Reputable Sources (i.e. CISA newsletter) The company is actively monitoring newsletters for critical vulnerabilities published by reputable sources. |
Infrastructure security
| Control | Status |
|---|---|
|
Cloud Based and On-Premise Firewalls The company has firewalls protecting each environment. Control with longer text description Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut alinquip ex ea commodo consequat
|
|
|
IDS \ IPS The company has intrusion detection and intrusion prevention measures in place |
|
|
Network Segmentation The company’s network is segment to prevent unauthorized access to customer data |
|
|
Privilege Access Management System The company uses a PAM to control, administer and monitor privilege access to systems |
|
|
WIFI Security The company WIFI system is secured to industry standard. |
Subprocessors
Blackbaud • Accounting System
Product Suite
Submittable • Platform Provider
Product suite
JPMorgan Chase • Check Processing
TEST
Product Suite Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat
Microsoft Azure • Infrastructure Hosting
Product Suite
Amazon Web Services • Infrastructure Hosting
US
Product Suite
Scholarship America Overall Results
The overall S2SCORE (or risk rating) is 816.08.
816.08
Excellent
A S2SCORE of 816.08 translate to “Excellent”. In general, a S2SCORE in this range means that all critical controls and safeguards have been implemented to protect organizational assets including additional compensating controls. There are no identified vulnerabilities in the presence of applicable threats at his time. Potential impact would be localized to the project level with minimal financial loss.
The S2SCORE is calculated in a range from 300 to 850. The lower the score, the higher the risk. And vice versa. A S2SCORE of 660.00 or “Good” is acceptable to most organizations and should be the goal for Scholarship America.
S2SCORE Scale
