BMC Helix: SaaS Security and Reliability

• BMC was the world's first IT management provider to get its Data Privacy Binding Corporate Rules Policy (BCRs) approved by the European data protection authorities, both as a Controller and a Processor. With the advent of the European General Data Protection Regulation (GDPR), BMC updated its BCRs to reflect the relevant changes.
• We follow Federal Information Processing Standards (FIPS) 199 guidelines on determining potential impact to organizational operations, assets, and individuals through a formula that examines three security objectives: confidentiality, integrity, and availability.
• The BMC Security Operations Center (SOC) and Network Operations Center (NOC) teams work 24x7x365 to ensure the continuous and secure operation of your service. The NOC makes extensive use of BMC’s world class monitoring and automation solutions, and frequently resolves potential incidents before they impact customers.

With BMC Helix, we’ve built availability and resiliency into every layer: from physical security through to computer, network, and storage. Our employees and contractors are rigorously trained to protect your data at every turn, and to safeguard the integrity of how data is shared.

Service environment: Separate customer environments are provisioned for your BMC Helix services. Customer data is not co-mingled with other customer data or between environments.

Service availability: Our Information Systems Contingency plan (ISCP) establishes comprehensive procedures to recover BMC Helix services quickly and effectively following a service disruption.

Our integrated security framework is designed to operate effectively at the speed that networks currently require. We embed technologies that provide a holistic view and are capable of taking action on threats. We believe in continuous risk assessment and in leveraging automation with governance rules specifically for the cloud. BMC’s security strategy includes the following layers:

• Governance
• Physical
• Perimeter
• Network
• Endpoint
• Application
• Data