Progress DataDirect Hybrid Data Pipeline Security Statement

This document is a security statement for Progress DataDirect Hybrid Data Pipeline, version 5.0.0. It describes the risk and vulnerability management strategies implemented for the security and governance of the Hybrid Data Pipeline. The document outlines the importance of configuring and managing end-to-end security, which includes a defense in depth strategy, network security, encryption, and access control. It emphasizes the necessity of managing, inspecting, and validating all ingress and egress points to prevent and correct vulnerabilities. The document details the architecture of the Hybrid Data Pipeline, including components such as clients, the Hybrid Data Pipeline server, and the On-Premises Connector (OPC). It explains how these components interact securely and the deployment patterns available for organizations, including server-only and OPC deployments. Additionally, it discusses the significance of compliance and encryption in securing data access and the processes involved in authentication and data management.