Compusearch | PRISM: Security Features

PRISM —Security Features

Overview

Document Ownership Security

Users/groups of users can share ownership of documents.
Document ownership can be established on a document-by-document basis.
PRISM permits identifying if shared owners have read/write or read-only access.
Only users with appropriate document access can edit documents, including attachments and supporting documentation.

Password Security

Requires all users to have a User ID and Password.
Approval passwords are separate from login passwords.
Validates user ID's and passwords upon entry based on configurable rules.
Users can be automatically inactivated based upon agency defined rules.
Users can be automatically inactivated after a prescribed number of failed login attempts.
Passwords may optionally be expired after a user-defined time period.
The system administrator can prescribe password parameters (e.g., length, character type).
A separate expiration period may be established for regular users and system administrators.
Password data is encrypted.
The solution maintains an audit log of successful and failed login attempts; log includes the originating IP address.

Security Groups

An unlimited number of security groups can be created and maintained by the System Administrator.
Security groups typically define a type of user (e.g., Contracting Officer, Approving Official).
Security groups define the access rights granted to the group.
Individual users may be assigned to one or more security groups.
Security groups define system features (i.e., menu options) accessible by the group.

Audit Logs

The system maintains an audit log to capture changes to users (e.g., adding, editing).
An audit log is maintained to capture changes to security groups (e.g., adding, editing).
The solution maintains an audit log of successful and failed login attempts.
An audit log is maintained to capture users that view any system-generated audit log.

Additional Information

Review Our Software License Agreement