Rapid SOC 2 and GDPR Compliance through Cloud Provisioning
Business Benefits
ProgramWorks Challenges
ProgramWorks’ clients were demanding a higher level of security and compliance than ever before. In addition, their on-premises hardware was starting to reach the end of life so they chose to migrate the entire ProgramWorks environment to the public cloud. That included both their external customer-facing operations, as well as the internal office environment — a massive undertaking. They also had a high maintenance hot backup system for emergencies that required modernization with load-balancing and high availability. Lacking the needed DevSecOps expertise, the company decided to seek outside implementation assistance. They first engaged with an IT services vendor and spent a number of months trying to work out a contract and Statement of Work to build and maintain the new cloud-based environment. After planning on a high-level strategy for rebuilding and migrating the environment, they couldn’t agree on a contract because the vendor could not guarantee compliance nor provide a quote for the whole project. This left the ProgramWorks team in the unenviable position of having to look for another solution mid-project.
DuploCloud Solution
Their impending SOC 2 and GDPR audits meant that ProgramWorks needed a fast new business network, including production, development, and VDI for staff. Prescient Security was selected for the audit, and they immediately referred ProgramWorks to DuploCloud. DuploCloud and the ProgramWorks team revised the services agreement to meet their needs. DuploCloud jumped in and built the entire environment in less than two months. The DuploCloud team worked with ProgramWorks development staff to containerize their code and perform other DevOps modifications needed for secure and compliant deployment of their entire network in AWS. The DuploCloud DevOps-as-a-Service software platform simplified spinning up new environments, efficiently managing AWS services including CloudWatch, CloudTrail, GuardDuty, AWS WAF, AWS Security Hub, IAM, Security Groups, KMS, and others, the stitching together of developer tools for a streamlined dev pipeline, and secured isolated environments between the development tenants.
About ProgramWorks
With headquarters in Winter Springs, Florida, ProgramWorks develops and operates two SaaS applications: WorkSchedule.Net and DropTime. WorkSchedule.Net is the company’s flagship application, providing an employee scheduling and time-tracking solution for businesses. The company just released Version 9, now in beta, with an advanced calendar editor that allows easy modification of multiple shifts at once, sorting three levels deep, and much more. Built-in AI makes sure the schedule is created and adjusted within given schedule policies, like skill or location qualifications, employee availability, and maximum weekly hours.