Amazon Web Services

Oban offers its Platform as a fully managed service utilising Amazon Web Services (AWS).  AWS provides an elastic, high availability and secure environment that includes a Disaster Recovery capability via dual data centres.  Furthermore, since the data centres are in Sydney there is no data sovereignty issue.

AWS offers the following capabilities:

• Hosted in Sydney; in Australian Region of AWS
• Dual Data Centres; one North of Sydney, other to the South
• Auto Failover & Load Balancing between both Data Centres
• Active/Active configuration - resilience
• Scales out (additional machines spin up as required)
  • Minimum of 2 running
• Scales up (additional resources added; RAM, CPU and storage as required)
• 12 Nines availability (99.9999999999% uptime)
• 15 Minute Disaster Recovery RTO (Recovery Time Objective)
• Zero Disaster Recovery RPO (Recovery Point Objective)
• High Availability (HA) Design:
  • Elastic Load Balancing (ELB) implemented
  • Auto Scale out on demand
  • Dual Site Resilience (Active/Active)
  • 24/7 (12 Nines availability)
• Database:
  • AWS based Relational Data Service (RDS) utilised – professionally managed DBA
  • Backups automatically & seamlessly occur – 7 day retention period
  • SQL Server Always-On implemented, distributed over both zones
  • Mirrored – dual instances always online
  • Database encryption enabled

AWS Compliance

AWS complies with the main Australian and International standards as detailed here.

The compliance standards that are relevant to the Superannuation and Financial Services industry are:

• The Information Security Registered Assessors Program (IRAP) which enables Australian government customers to validate that appropriate controls are in place and determine the appropriate responsibility model for addressing the needs of the Australian Signals Directorate (ASD) Information Security Manual (ISM).  View the Letter of Compliance here.
• ISO 27001 which is a security management standard that specifies security management best practices and comprehensive security controls.  The basis of this certification is the development and implementation of a rigorous security program, which includes the development and implementation of an Information Security Management System (ISMS) which defines how AWS perpetually manages security in a holistic, comprehensive manner.

Managed Services

Oban's Production Environment in AWS is managed by RedBear IT.

RedBear IT is responsible for:

• the configuration of Oban's Production Environment under AWS including the Disaster Recovery (DR) component
• fine tuning Oban's Virtual Private Cloud (VPC) guarantees the best performance from AWS
• monitoring Oban's VPC (redundancy and alerts guarantees maximum uptime)
• security monitoring