Data stored on the V-Server is more secure than if stored on PCs located in an optometry practice. This is because the V-Server has been implemented by IT professionals using sophisticated security and is located in a secure data centre location.
Here are some specifics about both the physical and internet security in place for V-Server clients;
Physical security
Storing data on local computers in the practice puts the data at risk from physical damage (accidental or malicious), theft and inappropriate staff access. The alternative – the V-Server system is located in a secure data centre and is kept cool and dry, protected from power related spikes/outages as well as any damage or theft.
Internet security
Local computers at practices connected to the internet in a relatively insecure manner are also more at risk from online hacking and other remote threats like worms and viruses than if the data is stored on the secure V-Server. The V-Server is located behind sophisticated firewalls and virtual private networks to keep unwanted access out.
In many cases (particularly in regional areas) amateur computer enthusiasts setup optometry practice computer networks for optometrists without setting up the correct security protocols which puts patient data and optometry practices at risk. One anecdote was about an optometrist in Western Australia (not a client of Bluewave) who found that Russian hackers had got into their practice computer network and was using their server as part of an illegal gambling ring!
The V-Server comes with a clear Service Level Agreement outlining a guaranteed availability of 99.7% uptime and security measures in place (shown below).
Bluewave uses an ISO9001:2008 accredited Data Centre facility (Lic# QEC22027) to host the V-Server service.
The Data Centre includes the following features;
| • | Fully Decontaminated Environment |
| • | Industrial Grade Power supplies including redundant Uninterruptible Power Supplies plus Diesel Generator (plus capacity for additional Mobile Generator) |
| • | Multiple Air Conditioning systems with pressurised floor and hot/cold air aisle design |
| • | Automated Gas Fire Suppression |
| • | Redundant multi-gigabit, Fibre paths including building lead in |
| • | Cat6 UTP cabling standard |
| • | Premium Co-location service able to support dual power supplies and redundant network paths |
| • | Personalised, escorted access only via registered ID system plus 24x7 Video Monitoring |
Data and Network Security
| • | Each V-Server is a fully complete installation of Windows Server 2008 R2 using Microsoft Terminal Services. |
| • | Each V-Server is made accessible via a secure link (static IP required) and is located on a unique, separate V-LAN network (VPN connections are also available) |
| • | Each V-server is protected by a secure firewall from the external Internet and web filtering, anti-virus and anti-spyware are standard on all V-Servers. |
| • | Each V-Server has a unique set of user passwords for user access which can be changed by clients on demand. |
| • | Each V-Server is backed up using regular snapshots to multiple secure locations including an internal datastore in the data centre as well as to a second data centre |
| • | Each V-Server client is provided with a facility to download their data on-demand ensuring that they have access to their data at all times for any purpose. |
There are options to ensure internet redundancy - we do suggest to those who have concerns about their internet to have a USB wireless internet modem on standby in the practice (these are now available as a pre-paid option so no ongoing cost). This way in the event of an Internet service outage they are able to plug the USB wireless modem into the special router we provide or any of their PCs and this will enable access to the V-Server for the practice while their ADSL is restored by their ISP.
Internet services are improving - although the incidence of internet outages is now rare with business grade services (eg. Telstra Business Broadband) we believe as the rollout of the NBN gathers pace these infrequent incidences will decrease significantly over the coming years. Of course the rollout of this next generation Internet infrastructure will also mean much faster Internet speed (10-20 times faster than ADSL2+).