Data security

Two modes to grant access rights are available:

• Select [Access permissions are granted by a security administrator] if you want a simple access permissions management in which only one Security Administrator intervenes.
• Select [Access permissions are granted by a level 1 security administrator and validated by a level 2 security administrator], if you want every action taken by Security Administrator to be validated by a second one.

According to the authentication type used by the Database Administrator (DBA) to connect to the database server, you can select:

• Use Windows NT integrated security: the DBA is authenticated by its NT account (we recommend this authentication level).
• Use a specific username and password: the DBA is authenticated by a username and a password.

On top of providing the obvious functions, the identity and access management must prove its efficiency.

The evidence must be remitted to auditors upon request and in written to be archived.

The proof must cover the frequently audited areas, i.e.:

- Administrator actions

• Create User
• Delete User
• Change User Password
• Change management strategy of passwords
• Change access configuration to LDAP directory
• Access granted
• Access denied

- Final user actions

• Login
• Logoff
• Specific messages from the application

- Tests for compliance with security policy

• User account locked after n failed tries log on

The Users Audit table describes all actions executed by the users.

The System Audit table describes all actions executed at time t.