Initializing CyberFrame
Securing your compliance journey...
Security
CyberFrame handles sensitive assessment data for government and enterprise. The security model is designed for that responsibility: per-assessment isolation, tamper-proof audit trails, and cryptographic integrity verification at every layer.
Isolation Architecture
Each assessment runs in a fully isolated environment. Assessment data never co-mingles with other engagements. When an assessment completes, the environment is decommissioned.
CyberFrame Platform
Assessment A
Assessment B
Assessment C
Complete isolation: separate database, authentication realm, and file storage per assessment
Each assessment runs in its own isolated environment with dedicated database, authentication, and file storage. Assessment data never co-mingles between engagements.
Every evidence file is scanned for malware on upload before it enters the platform. Unsafe files are rejected before they reach the assessment workspace.
Granular permissions across every entity type with phase-specific restrictions. Formal approval workflows and delegation authority where assessments require governance.
Every significant action generates a hash-chained audit entry. If a single record is modified after the fact, the chain breaks and the discrepancy is immediately detectable.
Evidence files are hashed at upload and tracked through every access, annotation, and transfer. Integrity is cryptographically verifiable at any point during or after the assessment.
Single sign-on with multi-factor authentication. Secure session management with automatic rotation, CSRF protection, and rate limiting. Integrates with your identity provider.
Data encrypted in transit and at rest. Secure inter-service communication between platform components. Sessions protected with authenticated encryption.
Content security policy headers, input validation and sanitisation, file type and size restrictions on all uploads, and cross-site scripting prevention throughout.
Fully managed. No infrastructure to maintain.
Deploy within your own infrastructure for full data sovereignty.
Disconnected environments for classified and restricted networks.
Reports and evidence can carry Australian Government classification markings. Classification appears on every page of exported deliverables.
We are happy to walk through the isolation model, audit architecture, and deployment options in detail.