Imperva

Imperva offers a comprehensive training and support program to help new users effectively implement and manage their security products. The training is designed to equip professionals with the necessary skills through various formats:

• Open Enrollment Classroom: Instructor-led classes hosted at physical Imperva locations.
• Virtual Classroom: Instructor-led classes conducted via web conferencing.
• On-Demand Training: Self-paced courses available through Imperva University, providing 90-day access to materials.

Imperva implements several robust security measures to protect data:

Real-Time Monitoring and Blocking: Imperva SecureSphere monitors all traffic for security policy violations and can quarantine or block suspicious activities in real time.

Automated Discovery and Classification: The software automatically discovers and classifies sensitive databases and data, identifying excessive user rights and dormant users.

Multi-Tier Architecture: Supports scalability and efficient audit logging, ensuring high performance and minimal impact on database operations.

Integration with Other Security Systems: Imperva integrates with malware protection, SIEM, and other specialized security systems to close security gaps and align processes.

Protection Against Zero-Day Attacks: The software is effective against OWASP top 10 vulnerabilities and protects without the need for extensive tuning.

Imperva releases updates and manages them through a structured process:

Regular Updates and Upgrades: Imperva provides regular updates and upgrades to ensure the software remains effective against new threats. These updates are part of the maintenance services offered to customers with active support contracts.

Support for New Versions: Customers receive updates on new versions of the software, and Imperva provides support for these versions under their end-of-life policy.

Automated Health Monitoring: The software includes automated health monitoring capabilities to detect configuration problems and system errors, reducing administrative overhead and downtime.

Dedicated API for Integration: Imperva offers a dedicated API set for integration with tools like Splunk, enabling users to add custom activity feeds and create customized reports.

Imperva's Data Processing Agreement (DPA) and related documents outline their policy on data ownership and portability. The End User (client) is the data controller, while Imperva acts as a data processor on their behalf. Imperva supports data portability by allowing data to be transferred and processed across different locations, including the United States and other countries where Imperva or its subprocessors operate. Transfers are made complying with applicable data protection laws, including Standard Contractual Clauses and UK Model Clauses. Imperva ensures that international data transfers comply with relevant regulations, including entering Standard Contractual Clauses for transfers of personal data from the European Economic Area (EEA) to countries outside the EEA. Imperva will not disclose or provide access to End User Data unless required by law or with the End User's consent.

Imperva offers scalable solutions that can adapt to changing organizational needs. These solutions are designed to handle increased data volumes and complex security requirements as the client's business expands. Imperva offers both agent-based and agentless deployment options, allowing organizations to choose the best fit for their infrastructure. The SecureSphere MX Management Server provides centralized management, allowing organizations to manage multiple gateways from a single console. The solutions also feature high availability and redundancy, ensuring that scaling up doesn't compromise performance or security. Additionally, Imperva's solutions are cost-effective, with a total cost of ownership (TCO) that scales efficiently relative to industry alternatives, making it easier for organizations to manage costs as they scale their security infrastructure.

Automatic Renewal: Support, subscription services, and subscription licenses for software and appliances will automatically renew at the end of the applicable term unless either party provides at least thirty (30) days' notice of non-renewal before the end of the current term.

• Termination for Breach: Either party may terminate the agreement due to a material breach by the other party if the breach remains uncured for thirty (30) days following written notice. Imperva may also terminate the agreement immediately if the end user breaches specific provisions related to licensing, subscription services, or confidentiality.
• Post-Termination Obligations: Upon termination or expiration, Imperva will cease providing subscription services, support, and professional services. Licenses granted under the agreement will terminate, and each party must return or destroy the other party's confidential information. Termination does not relieve the end user of the obligation to pay any accrued fees.

Imperva software meets several key compliance standards, ensuring that organizations can maintain regulatory compliance across various industries:

GDPR (General Data Protection Regulation): Imperva helps organizations comply with GDPR requirements, including data discovery and classification, data minimization, pseudonymization, security of processing, breach detection, and data transfer requirements.

PCI DSS (Payment Card Industry Data Security Standard): Imperva simplifies and automates PCI DSS compliance by providing tools and controls needed to protect cardholder data, including real-time protection against data breaches and full visibility into data usage and vulnerabilities.

ISO/IEC 27001: This standard requires an independent and accredited body to formally audit and certify that an organization’s information security management system (ISMS) meets the standard’s requirements. Imperva helps organizations achieve and maintain ISO 27001 certification.

SOC 2 (Service Organization Control 2): Developed by the American Institute of CPAs (AICPA), SOC 2 defines criteria for managing customer data based on five “trust service principles”—security, availability, processing integrity, confidentiality, and privacy. Imperva helps organizations meet these criteria.

HIPAA (Health Insurance Portability and Accountability Act): Imperva assists healthcare organizations in meeting HIPAA requirements by providing data security solutions that protect patient information and ensure compliance with regulatory mandates.

SOX (Sarbanes-Oxley Act): Imperva helps organizations comply with SOX by providing tools for data security, risk management, and audit readiness.