Category:Security

This page is meant to organize categories, please see the below listings to navigate the sub-categories and articles.

This category contains articles related to SmartSimple security.

SmartSimple handles client data with the utmost integrity. Security features and functionality exist at all levels of our system - from administrative controls to encrypted servers which are securely housed in a SSAE 16  (SAS 70*) data center. 

The below chart is a broad overview of our security process, licenses, and features: 

Certifications, Memberships & Compliance	SSAE 16 (The United States)* CSAE 3416 (Canada)  FS-ISAC (Financial Services - Information Sharing and Analysis Center)
Encryption & Protection	SHA 256 Password Encryption  SSL (128/1024) Encryption Closed ports All outward-facing URLs are encrypted Encrypted severs (provides protection from "bare metal attacks")  DDoS shield
Role-Based Permissions	The creation of user roles define levels of access - this is a central feature of the SmartSimple platform  This user level control ensures that information is only accessible to those who are authorized See Also: Organization-Based Security
System Lockdown	At the first sign of an attempted breach of security, your SmartSimple instance can be placed on lockdown. This ensures that access is limited to parties who are addressing the security concern.
Forensic Auditing	With your permission, SmartSimple can track system usage and provide you with detailed access reports. This may help to identify any unauthorized access resulting from issues such as shared passwords and malicious data manipulating.
Reader Log and Field Change Tracking	All field changes are tracked and auditable.
Two-Factor Authentication	Protect your organization and system by requiring an additional layer of user verification beyond a username and password. Two-factor authentication drastically reduces the incidence of online identity theft and fraud.

• SSAE 16 supersedes Statement on Auditing Standards (SAS) No. 70 with the professional guidance for performing a service auditor's examination. 

Subcategories

This category has the following 3 subcategories, out of 3 total.

A

• ► Access Control‎ (1 P)
• ► Authentication‎ (1 P)

S

• ► System Auditing‎ (14 P)

Pages in category ‘Security’

The following 62 pages are in this category, out of 62 total.

A

• Anti cross-site framing security
• Application Scope Access
• Authentication Member

B

• Bypassing the Login Page

C

• Category Type - Field Availability
• Challenge Question
• Company and User Security Matrix
• Company and User Security Matrix - Why?
• Configuring Privacy, Confidentiality and Other Policies
• Contact Assignment Role Settings
• Custom Password Policy Examples

D

• DDOS Blocked IPs
• Disable User Account After Inactive Period - Why?

E

• Edit Condition
• Email & Email Broadcast Security
• Email restriction
• Enable Logout
• Enable URL Parameter Encryption
• Enforce Single Sign-On by Disabling Direct Login Access - Why?
• Enhanced Security Mode

F

• Field Permission Matrix
• Field Permissions

G

• Global User Administrator

I

• Instance Lockdown
• Instance-Based Anti Cross-site Framing Security - Why?

L

• Legacy Application Permissions
• Lock System Configurations

M

• Multi-Factor Authentication

O

• Organization Assignment Role Settings
• Overview of the Security Models

P

• Pandora Developer Keys
• Pandora Security Matrix
• Password
• Password Policy
• Permission Quick Edit
• Policy Field Sets and Policies
• Primary Authentication Controller
• Privacy and Security Policies

R

• Reporting on User Type and Access Type
• Restrict Contact Assignment
• Role Field Permissions
• Role Type - Field Availability
• Roles and Security Settings

S

• Screen Share
• Security Settings
• Session Timeout
• Single Sign-On
• SmartSimple System Logs
• Split Screen
• SsEncrypt
• SSL
• Status Field Permissions
• Suppress E-mail Alert
• System Feature Permissions
• System Security Summary

T

• Terminate User Session
• Type Field Permissions

U

• User Delegation
• User/Contact Security Audit
• UTA Contact Filters
• UTA Security Matrix
• UTA Settings - Security