Support

DSRE - Digital Services and Risk Engineering GmbH

https://corporatesolutions.portal.swissre.com/terms-info

No. ExTool V5 is also not part of any other SwissRe software packages.

No. ExTool V4 can unfortunately no longer be provided. It is no longer covered by our legal arrangements.

Ex-Tool is hosted on Microsoft Azure Cloud. The Swiss Re Azure cloud environment was the subject of a detailed assessment, including external legal counsel, which concluded that the set up and processing operations met GDPR standards.
Technical and organizational measures, described below are implemented:

• Sensitive personal data is protected with state-of-the-art data security measures, including against unauthorized access by third parties (this includes unauthorized Microsoft employees).
• This data is encrypted when stored ("at rest") and decrypted only when the related business application running requests access to it on behalf of an authorized user. This data is also encrypted in transit.
• The decryption key is stored in a key vault in Microsoft's data centers but can only be used (a) by users on a pre-defined authorization list ("Active Directory") of which the master copy is managed and maintained by Swiss Re on-premise, and (b) only from within the internal network of Swiss Re (based on the IP address of the requestor).
• Employees of Microsoft will have no clear text access to Swiss Re data or client data.
• Microsoft's administrator privileges for administering Azure does not give them access to Swiss Re's applications in a manner that enables usage.

Below the most recent information on data center locations and further information, provided by Microsoft, on their information security.
Datacenter / Server : West Europe - Paired Region (Netherlands & Ireland)

• Each Azure region is paired with another region within the same geography (e.g. Europe), together making a paired region.
• Geo-Redundant storage (GRS) is configured by default when an Azure Storage account is created, meaning data is automatically replicated 3 times in the primary region and 3 times in the paired region
• Benefits include Physical isolation, Region recovery order etc.
• Disaster recovery exercise done annually to replicate full region failure.

Information Security
The use of Microsoft security features and Microsoft's security certifications mitigate the risk of security violations. Microsoft Azure implements a broad range of technical, organizational and contractual measures that ensure the Confidentiality, Integrity, and Availability (CIA) of information while complying with applicable legislative, regulatory, and contractual requirements. Examples are:

• Encryption of customer data in transit and at rest
• Logical separation of tenants to isolate customer environments
• Least Privilege and Just-in-Time access of administrative personnel
• In-depth 9 step incident response process
• Wargame exercises and regular Red Teaming to evaluate and improve Microsoft’s Assume Breach readiness
• Contractual commitment to specific processes how customer data is deleted when a customer leaves a cloud service
• Azure and the underlying Microsoft Cloud and Infrastructure Operations (MCIO) physical environments employ security frameworks that span multiple standards, including the ISO 27000 family of standards and others.

We are able to provide you with a SOC 2 report. This document would cover most queries relating to this topic. 

No. A desktop version of ExTool V5 is currently not available.

No. We have recorded demo videos which show the functionality of the tool - https://corporatesolutions.swissre.com/insights/apps-and-tools/extool.html.

No. ExTool is intended as a tool box for professional engineers who understand the concepts involved and are capable of making their own professional judgement. Please use the manual which you find in the tool itself as well as the demo videos which are located on our ExTool V5 website https://corporatesolutions.swissre.com/insights/apps-and-tools/extool.html.