Security Overview

Security of the Platform

Security takes on several dimensions. Below is a list of security highlights available within the Riskonnect Platform.

Security Infrastructure

User Access
  • Customized password policies that match your organization’s policies
  • Access may be restricted to your network
Application
  • All passwords encrypted
  • Highly secure session key management
  • Application self-monitors for security violations
  • Access to data may be limited by type of user and part of organization
  • Granular security may limit access to type of data, fields, reports, screens and functionality as required
Internet
  • 128-BIT SSL for all transactions
  • Verisign Certificates
Firewall
  • Tightly controlled perimeter firewalls
  • Intrusion detection systems
  • Proactive log monitoring
Physical
  • Top-tier data center facilities
  • Biometric access screening
  • Escort controlled access
  • Armed Guards
Protection at the application level, facilities level and network level

Riskonnect and its platform provider protect customer data by ensuring that only authorized users can access it. Salesforce.com security standards are on par with the best civilian data centers in the world, including the world’s most security-conscious financial institutions. Data is backed up to disk and to tape, with tape providing a second level of physical protection. Neither disks nor tapes ever leave the data center. Administrators assign data security rules that determine which data users can access. Sharing models define company-wide defaults and data access based on a role hierarchy. All data is encrypted in transfer. All access is governed by strict password security policies. All passwords are stored in MD-5 hash format. Applications are continually monitored for security violation attempts. Additionally, multilevel security products from leading security vendors and proven security practices ensure network security. All networks are certified through third-party vulnerability assessment programs. The platform provides industry leading security with comprehensive Third-party validation