FAQ: LMS Security and Compliance Requirements

FAQ: LMS Security and Compliance Requirements - Infrastructure

What is your network security policy?
PF security policies are available at https://ltgplc.com/trust-center/
​
Do you use remote access tool when accessing the servers?
Yes.
Kindly state what kind of remote access tool do you use?
VPN
How often do you do patching?
Deployment is dependent on the need for a patch.
What anti-virus do you have installed on the server?
We do not disclose the exact implementation; however, we can explain our approach. We have AV, IDS/IPS, firewalls, WAF, and SIEM in place.
What operating system is used on the server?
This information is not shared externally due to security considerations.
Do you have log security events enabled?
Yes.
How often do you review the event logs?
Logs are reviewed at least quarterly to ensure ongoing security monitoring.
Is data backed up regularly?
Daily backups are performed. PeopleFluent's security policies can be found at https://ltgplc.com/trust-center/.
Could you describe your backup process?
The backup process is documented in PeopleFluent's backup policy, which can be found at https://ltgplc.com/trust-center/.
What is the approximate time for data recovery?
Our approximate data recovery time is 24 hours (Recovery Time Objective - RTO) with a data recovery point of 72 hours (Recovery Point Objective - RPO).
Do you practice data recovery testing? If so, how frequently do you perform it?
Yes, data recovery testing is conducted on a quarterly basis.
 

    • Related Articles

    • FAQ: LMS SSL Certificate Renewal

      Q: What is an SSL certificate and why is it important for the LMS? A: An SSL (Secure Socket Layer) certificate encrypts communication between a web server and a user's browser, ensuring secure data transmission. It is essential for maintaining ...

    • Frequently Asked Questions: LMS Data Encryption

      Is LMS data encrypted when it is "at rest" (LMS Data in REST Encrypted)? Yes, LMS data at rest is encrypted. PeopleFluent LMS utilizes AES encryption for data at rest. This applies to databases and file systems, especially in our cloud-hosted ...

    • FAQ: PGP Encryption Support in LMS

      Q: Does the LMS support PGP encryption? Yes, the LMS supports PGP encryption, which was introduced in version 23.7. This includes features such as data encryption and transfer, inbound and outbound encryption, and external SFTP transfer. Q: Can I try ...

    • Troubleshooting LMS Slow Response Issues

      1. Purpose This article outlines the information needed to effectively troubleshoot slow response issues encountered within the PeopleFluent Learning Management System (LMS). Providing detailed information will help the support team to accurately ...

    • How to utilize the PeopleFluent LMS API

      How to utilize the PeopleFluent LMS API The PeopleFluent LMS exposes its data via an Application Programming Interface (API). The API is HTTP-based, and makes use of widely-supported Web data formats such as XML, JSON, Atom and RSS. The API is ...