City Council Study Session Agenda and Packet 2011 09 13

Home Browse Search

Epicor HCM Proposal have a number of security options available to them, from basic SSL encryption to certificates or two - factor techniques. The Right Access to the Right People Each authorized individual receives a user account in a specific security role and row -level security group. To successfully log on to Epicor HCM, each user must enter their account name and password, which the company can configure to require a specific length and include numbers, letters and special characters, greatly enhancing security. "Permissions" are the privileges users have in Epicor HCM, or the tasks they can perform, such as viewing, creating or deleting records. With Epicor HCM, HR personnel control what privileges each use: has by assigning them a role, which has certain permissions. Each role, such as Employee, Manager or Admin, has different permissions appropriate to the position. HR can further specify permissions by defining the rows each user can access. In essence, while a user may have a key to the room in which files are stored, they may need an additional key to access the various file folders within that room. For example, a manager may only access their direct reports, or a data entry clerk may only view records in a certain location. Typically, a Manager user may view all information on their direct reports, or a Benefits user may view, add or change benefit information for all employees. Epicor's Hosted Services Co- Location Security Starting at the connection point to the Internet, Epicor currently partners with ViaWest for our co- location services. Some of the reasons we chose ViaWest are; Physical Security: Multi -layer security control procedures, two factor door entry, 24x7 closed- circuit. video and alarm monitoring, staffed facility 24x7x365, and unmarked locked cabinets. • Power: Uninterruptible redundant power feeds. There is battery backup for short outages, and diesel generators for longer outages. • Cooling: HVAC redundant design with air distribution under raised flooring for maximum temperature control. + Fire Suppression: Smoke detection system above and below raised floor; double - interlock, pre - action, dry -pipe fire suppression, • fvtulti- Carrier facility: ViaWest maintains multi - carrier ISP connectivity. • Only authorized Epicor team members are authorized badge holders to the co- location facility. Badges expire annually and are reviewed / renewed by Epicor's hosting services manager. Infrastructure Security At the data center level, Epicor employs a 'defense in depth' strategy for protecting customer data. IV utilize industry standard best practices and procedures, including: • Enterprise class f r ewails: Industry standard and redundant firewalls. • Encryption: We require all customer web sessions to be encrypted via 128 bit SSL. Any attempts to connect with a lower form of encryption are denied. • Threat Management: Our firewalls are continuously updated with new threat definitions and provide intrusion prevention features. {c) Epicor Software Corporation 2011 20