All MIMICS systems have several levels of security in addition to the security provided by your own in-house system. All MIMICS systems are password-protected, allowing access only to valid users. Each user also has a user profile that defines the features of the system that can be accessed by that user. The database is encrypted, and any forms or reports that are created for distribution have the option to be encrypted.
Highlighted Security Features:
· Each User ID requires a case-sensitive password of up to twenty characters that adheres to the following requirements: minimum password characters, a capital letter, a number, a special character, no repeat characters and no reuse of previous passwords; passwords are encrypted within the database.
· Password strength and requirements can be set by administrator (including unavailable historical passwords), as well as the expiration of and mandatory re-setting of passwords.
· Administrator can set parameters for bad password attempts, including number of attempts and option to disable user; a bad login attempt log is automatically recorded and administrator must then unlock the user.
· Administrator can disable a login ID at any time, such as in the case of employee termination.
· Options enable administrator to set up automatic disabling of users after a specified number of inactive days; similarly, users can be logged off due to a specified period of inactivity at administrator’s discretion.
· Access profiles granting the appropriate access to the specified user type are easily set up, assigned and can be copied by the administrator; unavailable features to the user simply appear on screen to be dimmed out.
· The system can be configured to allow the restricting of access by data content, such as specifying which portfolios, securities, customers, etc. the user has access to.
· All MIMICS web portals use an SSL (Secure Sockets Layer) to provide a URL that establishes an encrypted connection for any data communication between the web server and the user’s web browser; portals can be set to a live database or a copy database.
· Statements, confirmations, receipts, reports and other forms can be e-mailed either individually or to a group as PDF attachments; these can be password protected individually or as a group.
· MIMICS utilizes the NetLib Encryptionizer as a required feature of its SQL Server version, which fully encrypts the database and data backups using 256-bit AES transparent encryption.
· Based on your specifications, MIMICS can tokenize data fields, such as account numbers.
MIMICS offers additional security options such as Two-Factor Authentication and Active Directory, as well as full Disaster Recovery option. Contact SALES for more information.