Security is essential for allour solutions and an integral part of the development cycle.
IQ Portal and all our other solutions are only accessible by registered- and authorised users and by the Administrator and is secured for non-authorised access by:
- Password protected access to our solutions
- Virtual Private Network (VPN)
- Fire wall protection
- Password encryption
- SSL-encryption for communication between servers and IT systems
- Encryption of all saved data
- Secure database server
- Automatic log-off
- Protected and encrypted databases
A number of measures will be taken to ensure confidentiality and data security, and to limit unauthorized access to the different data sets. Our data security is explained below based on the C.I.A. concept i.e. Confidentiality (privacy of information), Integrity (guarding unauthorized alteration) and Availability (for internal and external users).Encription Privacy and Integrity (Encryption using SSH and SSL).
For all data transfers and the exchange of authentication information between IQ Portal and its users, the exchange will be encrypted in transit. Virtual Private Networks (VPNs) and Secure Socket Layer (SSL) are two technologies that BaseSoft will use to implement privacy and integrity. The target architecture will employ VPNs to establish secured sub-channels on an otherwise public, unsecured communications medium. Thawte is used as a SSL technology that is commonly used by Banks. User authentication
Each user is assigned a user-name and password. This access code also determines the level of access the user has to the IQ Portal database (which sections of the database the user can access, what operations he/she can perform, whether the access is "read only" or requires a collaborative agreement with the "owner" of the data).
Basesoft Solutions uses VScan to maintain virus detection and removal software on our central servers.