> For the complete documentation index, see [llms.txt](https://docs.docbits.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docbits.com/chinese/security/other-security-controls.md).

# 其他安全控制

于 **2026 年 10 月 16 日**核查。本文区分已发布审计证据与当前基础设施清单。

| 控制              | 已记录范围                                                                                                                                   |
| --------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
| 网络防火墙           | SOC 2 报告描述 DigitalOcean VPC/安全组过滤及 IT 安全团队对配置更改的监督。当前只读检查确认存在活动云防火墙，包括关联 Kubernetes 资源的规则。                                              |
| Web 应用防火墙（WAF）  | GDPR 审计记录了保护产品的 WAF。当前托管规则、例外及各主机名覆盖范围未经过独立核查。网站和应用中观察到 Cloudflare 机器人防护 Cookie，但仅凭此无法确认 WAF 规则集。                                       |
| 负载均衡器           | 当前 DigitalOcean 清单确认法兰克福存在活动生产负载均衡器，并已配置健康检查。请求路由和会话亲和属于基础设施功能，详见 [Cookie 与浏览器存储](/chinese/security/cookies-and-browser-storage.md)。    |
| IP 允许列表         | 基础设施防火墙规则支持按来源过滤。尚未确认客户可自行配置的租户级 IP 允许列表、覆盖范围或例外。应与 FELLOWPRO 确定部署所需限制。                                                                 |
| 本地及沙箱测试         | [发布生命周期策略](/chinese/gai-shu-yu-ji-chu/docbits-release-lifecycle-strategy.md)介绍生产可用前的开发、QA/UAT 及沙箱评估。本地集成测试需要明确环境和适当测试数据。沙箱访问权本身不授权渗透测试。 |
| 虚拟机及 Kubernetes | SOC 报告描述生产加固标准、访问控制、端口限制及操作系统/网络补丁管理。当前清单确认存在托管 Kubernetes 集群，但并不保证每项工作负载采用相同加固设置。                                                      |
| 终端及移动设备         | SOC 报告描述终端反恶意软件、自动扫描、特征库更新及补丁监控。ISO 监督报告将 MDM 列为改进机会，因此全面 MDM、远程擦除及移动/BYOD 规则需要最新确认。客户负责其自有浏览设备的安全。                                     |
| 政策与程序           | SOC 报告描述正式信息安全政策、风险评估、访问控制、变更管理、事件处理及员工培训。最新政策及适用范围可向合规联系人索取。                                                                           |

## 证据与更多信息

[认证](/chinese/gai-shu-yu-ji-chu/architecture/certifications.md)提供审计报告及覆盖期间。历史审计支持其受评范围内的控制；基础设施检查仅确认核查日存在相关资源，不是完整的安全配置审计。

有关加密与身份验证，请参阅[凭据的安全存储](/chinese/security/secure-storage-of-credentials.md)和[静态数据加密](/chinese/security/encryption-at-rest.md)；有关评估、补丁及未解决 CVE，请参阅[漏洞管理](/chinese/security/vulnerability-management.md)。

部署限制、移动设备要求及最新政策证据，请联系 **<compliance@fellowpro.com>**。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docbits.com/chinese/security/other-security-controls.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.