Prosight Healthcare RTLS Platform Cybersecurity & Compliance
Cox Prosight IoT Platform implements industry standard healthcare cybersecurity and compliance standards to help protect the layers of an IoT solution ranging from product development, product support, cloud infrastructure, and customer applications.
Product development
Cox Prosight IoT Platform and Applications are automatically inspected by our Continuous Integration (CI) system for security vulnerabilities. Software packages and dependencies are then audited against a known list of vulnerabilities.
Cloud infrastructure
Cox Prosight IoT Platform follows CIS Benchmarks for Cloud Platform’s to secure and audit cloud usage. By default, all data in transit (TLS versions 1.2 or greater) and at rest (AES256 or AES128) are encrypted on the cloud. Key infrastructure components (all follow security best practices and are designed to limit exposure to the web and restrict escalation of privileges. Access to production environments is limited to authorized VPN networks.
Software web applications
Endpoints exposed to the Internet are protected by firewalls to minimize the attack surface and mitigate against DDoS attacks. The system also enforces TLS encryption (1.2 or greater) and applies HTTP security. Web Application Firewall also follows OWASP best practices and are designed to prevent common web attaches including Cross-Site Scripting (XSS), SQL injection, and XML External Entities (XXE). JWT tokens and OAuth-based authentication schemes are used whenever applicable. All critical applications are also protected via 2-Factor Authentication to mitigate phishing attacks and unauthorized access.
