Cloud Hosting Scope and Services
At KNOWARTH we provide an array of service for Cloud Hosting Services using DHIS2. We help server installations of Cloud technologies, Operating Systems, Servers, Database, Security Certificates, Web and Mobile applications, Networking, Storage, Backup and Recovery, Disaster Recovery and many other Cloud technology related services. Our cloud services include:
Setup
Setup
The ability to define “infrastructure configurations” in a programmatic way that leverages versioning, Reuse, and source control management. Develop an Automation solution to provision the services, resources and infrastructure component.
- Complete SSL (Encryption) Setup
- Replication and Clustering Setup
- Development Server Setup
- Quality Analysis (QA) Server Setup
- Production Server Setup
- Remote Server Setup
Support
Support
- Go-Live Support
- Upgrade Support
- Helpdesk Support
- Server Optimization
- Global Cloud Infra to Scale up
Deployment
Deployment
- Server and Application Hosting
- Code Deployment on Production Servers
- Server Optimization
- Database Encryption
- Patch Installation for Packages
Monitoring
Monitoring
- Server Monitoring
- Infrastructure Monitoring
- Application Monitoring
- Ticketing System Tracking
Management
Management
- Server Management
- Application Management
- Infrastructure Management
- Server Backup
- Application and Database Backup
Do you want more information on DHIS2 Cloud Hosting?
Features of Cloud Hosting
We have deployed DHIs 2 systems in many organizations across the globe with advanced cloud hosting features that show our expertise and experience to improve management, stability, security and performance of your company. We work with a host of VPS providers to host and manage DHIS 2 instances that are suitable for your organization. Our DHIS 2 features
- End-to-End infrastructure management, design, and implementation
- On-Demand Disaster Recovery & Cluster setups for mission critical applications for redundancy, availability, and failover
- Team of certified technical specialists in various technologies working 24×7 to manage Infrastructure
- World Class monitoring and ticketing systems for proactive and reactive remediation’s
- SLA based support with 99% guaranteed uptime
- Stringent Physical, Network and Data, security and access control for protecting Client’s Intellectual property data
- Process oriented data backups with retention, and regular validation to ensure data availability
- SSL and Data encryption for authenticity, protection, and security of Data while in transit as well as at rest
- Continuous Infrastructure and Application updates and upgrades for avoiding vulnerabilities and exploits
- Support and Management based on Industry standards and ITIL guidelines for highest quality services
- Critical Service Levels for performance measurement, tracking, and reporting
- Greater visibility to Clients with Reporting, real-time control, and analysis of historical trends
- Automation Tools to leverage flexibility and scalability to grow infrastructure horizontally and vertically
- Cloud Technology adoptions for flexibility, scalability, redundancy and availability, Globally
- Global hosting options, in different countries, based on Client’s requirement
- Tangible business benefits with Agility, new business models, less operational issues, better use of resources and less CapEx involvement
Require a custom plan for DHIS 2 cloud setup?
Shared Hosting Plan for Every Business
$50USD/mo
10 GB HDD Space
4 GB Ram
2 core CPU
$100USD/mo
50 GBHDD Space
4 GB Ram
2 core CPU
$150USD/mo
100 GB HDD Space
8 GB Ram
2 core CPU
How we can help
From setup to technical support and everything in between, our highly trained certified technical specialists for Cloud hosting have in-depth understanding of the DHIS2 components. We assist with:
- Problem Description Detailing
- Environment monitoring
- Application Information
- Error entry and message checks
- Item priority checks for troubleshooting
- Screenshots, log and other checks
SLA and Response Times
We believe that troubleshooting errors and completing tasks on time is our priority for our clients to smoothly run their business and operation using DHIS2 cloud hosting services. We usually respond as per Standard Resolution and Response Time as given below:
Email/incident support 24/7
| Serverity | Acknowledgement Receipt1 | Target Resolution2 | Final Resolution |
|---|---|---|---|
| Critical | 2 Hours | 1 Business day | 5 Business day |
| High | 4 Hours | 2 Business day | 10 Business day |
| Medium | 4 Hours | 3 Business day | 15 Business day |
| Low | 4 Hours | 4 Business day | 30 Business day |
1. Acknowledge Receipt means the time by which KNOWARTH must respond to the Incident reporter acknowledging receipt of the Incident.
2. Target Resolution means the target time for KNOWARTH to resolve the Incident and or deliver a temporary patch/fix.
Need Consultation? Speak to our DHIS2 Cloud consultants
Frequently Asked Questions
We work according the best prescribed stadards by both DHIS2 and Amazon Web Services (AWS). To help you further of what is included and how the cloud hosting works, you can review these simple Q & A on DHIS2 Cloud Hosting Services.
Data Collection
What, if any, data is collected by 3rd parties (e.g., via cookies, plug-ins, ad networks, web beacons etc.) ?
(‘Incl’) – DHIS2 uses cookie to store user session, permission and organization data in browser. We cannot ensure the security of such data in scenarios when third party plugins are installed on the user browser.
Which are Out OF Scope Services for Cloud Hosting Services?
There are few services which are not part of the Cloud Hosting Services like:
- DBA Activities
- Data Migration, Validation and Cleansing
- App Maintenance, App Development and App enhancements
- Third-party tool, application, interface troubleshooting
- Issues found with apps when production deployment is carried out or rolled back
Which other factors I need to consider before signing the Cloud Hosting Service Agreement?
- Any Software cost would be bared by Client
- KNOWARTH Team will work from off-shore office in Ahmedabad
- Client owned domain name
- KNOWARTH will request Admin Access to required servers/systems/services as and when required
Security question
Network Operations Center Management and Security
Does the provider perform regular penetration testing, vulnerability management, and intrusion prevention?
(‘Incl’) – Done when initial setup is done.
Are all network devices located in secure facilities and under controlled circumstances (e.g. ID cards, entry logs)?
(‘Incl’) – Done when initial setup is done. For more details, (aws.amazon.com/security/)
How are these backups secured? Disposed of?
(‘Incl’) – Security & Disposing are part of administration.
Are software vulnerabilities patched routinely or automatically on all servers?
(‘Incl’) – All infrastructure level patches will be done on monthly cycle for minor patches. For major patches it would be informed to customer before patching it.
Audits and Standards
Does the provider provide the organization the ability to audit the security and privacy of records?
Yes – Can be worked out depending on the details to be audited
Have the provider’s security operations been reviewed or audited by an outside group?
Yes – Can be done
Does the provider comply with a security standard such as the International Organization for Standardization (ISO), the Payment Card Industry Data Security Standards (PCI DSS)?
Not available (Unavailable) – However it is available from the hosting provider
Test and Development Environments
Will ‘live’ client data be used in non-production (e.g. test or development, training) environment?
Depending on client agreement and setup, it varies. We strongly suggest to have production environment different from staging, QA and dev instance.
Are these environments secure to the same standard as production data?
Yes. Might have to temporary allow access to debug in case of issues.
Data Breach, Incident Investigation and Response
What happens if your online service provider has a data breach?
It can be rectified; however, we would suggest to have third party security testing done so both parties are on same page based on report.
Do you have the ability to perform security incident investigations or e-discovery? If not, will the provider assist you? For example, does the provider log end user, administrative and maintenance activity and are these logs available to the organization for incident investigation?
Yes. We can provide assistance for security incidents if happened including application logs if for administrative and maintenance activities, if application supports.
Data and Metadata Retention
How does the provider assure the proper management and disposal of data?
a) The provider should only keep data as long as necessary to perform the services to the organization.
a) The provider should only keep data as long as necessary to perform the services to the organization.
Yes. Upon termination of services data would be deleted depending on requirement of backup to be transferred.
How will the provider delete data?
a) Is data deleted on a specific schedule or only on termination of contract? Can your organization request that information be deleted? What is the protocol for such a request?
a) Is data deleted on a specific schedule or only on termination of contract? Can your organization request that information be deleted? What is the protocol for such a request?
Generally, it happens to be on termination of contract. Until without prior written approval from business owner hosting team never deletes data.
You should be able to request a copy of the information maintained by the provider at any time.
Until without prior written approval from business owner hosting team can provide copy of data anytime.
All data disclosed to the provider or collected by the provider must be disposed of by reasonable means to protect against unauthorized access or use.
Yes. Policy can be setup for the process to dispose
Upon termination of the contract, the provider should return all records or data and properly delete any copies still in its possession
Yes.
Data Storage and Data Access
Where will the information be stored and how is data “at rest” protected (i.e. data in the data center)?
a) Will any data be stored outside Canada?
b) Is all or some data at rest encrypted (e.g. just passwords, passwords and sensitive data, all data) and what encryption method is used?
a) Will any data be stored outside Canada?
b) Is all or some data at rest encrypted (e.g. just passwords, passwords and sensitive data, all data) and what encryption method is used?
a) Options include:
b) (‘Incl’) – All data will be encrypted by changing one configuration of application.
b) (‘Incl’) – All data will be encrypted by changing one configuration of application.
How will the information be stored? If the cloud application is multi-tenant (several districts on one server/instance) hosting, how is data and access separated from other customers?
We wouldn’t suggest multi-tenant solution as it has security flaws.
Are the physical server(s) in a secured, locked and monitored environment to prevent unauthorized entry and/or theft?
This is the responsibility of the organization, not the provider, but it is possible to do within the features of the shared hosting price (Possible)
How does the provider protect data in transit? e.g. SSL, hashing?
a) (‘Incl’) – It will be taken care for Hosting & Support team.
b) DHIS2 platform allows various integration like Google Maps. Limited data is being exposed to such parties when using/leveraging features implemented in such platforms.
c) Support team will have super user credentials. So, based on request, L1 support staff will be able to use ‘super admin’ credentials to manage users account.
b) DHIS2 platform allows various integration like Google Maps. Limited data is being exposed to such parties when using/leveraging features implemented in such platforms.
c) Support team will have super user credentials. So, based on request, L1 support staff will be able to use ‘super admin’ credentials to manage users account.
Who has access to information stored or processed by the provider?
a) Does the provider perform background checks on personnel with administrative access to servers, applications and customer data?
b) Does the provider subcontract any functions, such as analytics? (this includes Google Analytics)
c) What is the provider’s process for authenticating callers and resetting access controls, as well as establishing and deleting accounts?
a) Does the provider perform background checks on personnel with administrative access to servers, applications and customer data?
b) Does the provider subcontract any functions, such as analytics? (this includes Google Analytics)
c) What is the provider’s process for authenticating callers and resetting access controls, as well as establishing and deleting accounts?
This is the responsibility of the organization, not the provider, but it is possible to do within the features of the shared hosting price (Possible)
If client or other sensitive data is transferred/uploaded to the provider, are all uploads via SFTP or HTPPS?
How does the provider assure the proper management and disposal of data?
a) The provider should only keep data as long as necessary to perform the services to the organization.
How does the provider assure the proper management and disposal of data?
a) The provider should only keep data as long as necessary to perform the services to the organization.
Yes. Upon termination of services data would be deleted depending on requirement of backup to be transferred.
How will the provider delete data?
a) Is data deleted on a specific schedule or only on termination of contract? Can your organization request that information be deleted? What is the protocol for such a request?
a) Is data deleted on a specific schedule or only on termination of contract? Can your organization request that information be deleted? What is the protocol for such a request?
Generally, it happens to be on termination of contract. Until without prior written approval from business owner hosting team never deletes data.
You should be able to request a copy of the information maintained by the provider at any time.
Until without prior written approval from business owner hosting team can provide copy of data anytime.
All data disclosed to the provider or collected by the provider must be disposed of by reasonable means to protect against unauthorized access or use.
Yes. Policy can be setup for the process to dispose
Upon termination of the contract, the provider should return all records or data and properly delete any copies still in its possession
Yes
Development and Change Management Process
Does the provider follow standardized and documented procedures for coding, configuration management, patch installation, and change management for all servers involved in delivery of contracted services?
Yes, for configuration management, patch installation & change management of server. We will follow DHIS2 coding standard.
Are practices regularly audited?
Yes, on quarterly basis.
Does the provider notify the organization about any changes that will affect the security, storage, usage, or disposal of any information received or collected directly from the organization?
Yes it would be informed where security, storage, usage or disposal policy & process are updated or affected.
Availability
Does the provider offer a guaranteed service level?
Yes. 99.9%. It would also depend on hosting provider which we may might not be guarantee.
What is the backup-and-restore process in case of a disaster?
Yes – There wold be hot-cold disaster where from backup systems can be restore, with chances of losing data up to certain hours.
What is the provider’s protection against denial-of-service attack?
Yes – We would have two different modules in web server to take care of this.