DSI's Development Process Differentiators

Security Scanning

Security and integrity of our software solution is something DeCare Systems Ireland (DSI) places at the highest priority. Having worked for many years with global brand names such as Avon, Amazon, Quest Software and many of the top Dental insurance providers in the US, DSI knows the strategic importance that is placed in the security of the solutions we build. Through our experience as a reliable partner and reputable provider of software development services, we deeply appreciate the importance that is placed in protecting our customer’s data from malicious attack, maintaining the integrity of our solutions and increasing the insight, visibility and confidence our customers have in their applications. Whether it is a global eCommerce website, a public service healthcare provider’s patient tracking system or a dental provider’s data processing application, DSI gives the security and integrity of these systems the priority it deserves.

The TJX settlement of $9.75m for data breaches occurring in 2007 has certainly raised the profile of security scanning in the industry. While DSI invest significant efforts in ensuring that our development teams develop according to industry best practice, it was felt that the implementation of an automated, industry standard security scanning mechanism was paramount to ensure protection from the ever increasing security threats faced by our customers. After a lengthy selection process, DSI chose to purchase with IBM and invested in Rational Appscan, winner of Software Test and Performance magazine’s “Rockstars of Testing” for security. Appscan was a natural choice for DSI as its support for Java, .Net, Web Services and Web 2.0 technologies meant it could be leveraged across DSI’s wide technology base.

DSI’s release process requires that all new versions of externally facing web applications are tested prior to being released to the customer, it is the responsibility of the project’s security lead to ensure that this occurs. Test results are logged to a central wiki which provides project management with oversight of the process and allows DSI’s architecture team to analyze and to sign off any false positives before allowing the release to continue. Intranet applications are scanned upon prior agreement with the customer.

From our customers’ perspective, the security of having their core applications scanned with industry tools and techniques allows them to approach their next audit with confidence. DSI ensures that its scans address issues pertinent to SAS-70, HIPAA, PCI DSS, SOX and other relevant industry security standards. When required, Appscan can produce reports customized to each standard allowing our customers to maintain customized records to address the needs of each audit.