IQRS Security
The IQRS operates on a secure web server and uses the latest technology, along with custom designed controls, to provide a secure environment for querying, reporting, data storage, and retrieval.
Each person who is authorized to access the IQRS must enter a unique user ID and password, along with the DBID. To ensure that the password cannot be easily guessed, strict guidelines are enforced when creating the password. The password must be changed every 90 calendar days. If the password expires the account will be automatically locked. To prevent account sharing, IQRS users are limited to one session per user ID.
IQRS sessions expire after 20 minutes of inactivity on most screens. Some screens, which require more data entry, time out after two hours of inactivity.
All data transmissions are protected using Secure Socket Layer (SSL) protocol. SSL interface between applications (such as browsers) and the TCP/IP protocols provide server authentication, client authentication, and an encrypted communication channel between client and server. Anti-virus software is installed to protect systems from known viruses, malware, and spyware. A firewall is used to filter all traffic and to keep malicious traffic outside the protected environment. An intrusion detection system monitors activity to identify malicious or suspicious events.
For more information about IQRS Security, see the following:
