Privacy & Does your product transmit and store passwords in clear 10 Yes 1 Security text? Please describe your security controls for both. Privacy & 11 Please describe the products access controls. Yes 1 Security Privacy & Does your product support roles based and rules based 12 Yes 1 Security access? Please describe how this is done. (users and groups) Privacy & Does your product enforce a session timeout after a 13 Yes 1 Security configurable period of inactivity? Privacy & Can your product reference external authentication 14 Yes 1 Security databases, specifically Microsoft Active Directory? Describe your products and logging facility/capabilities. Include: - Types of security events - How and where events are logged Privacy & 15 - Access controls to the audit records Yes 1 Security - How audit records are protected from deletion and unauthorized disclosure and modification - Administrator privileges - Configuration capabilities Please confirm which of the following information your product is capable of including in an audit record: Please provide as much additional information you feel is applicable. - User ID or process ID causing the event - Success or failed attempts to access security file - Date/Time of event - Event type Privacy & - Success or failure of event 16 Yes 1 Security - Success or failure of login attempt - Denial of access resulting from excessive number of login attempts - For add, change or delete events: name of data object written or deleted - Granting elevated privileges - For identification and authorization: origin of request (originating host IP address) - Discreet auditing of specific data elements Does your product audit facility bind the user ID of the Privacy & 17 Yes 1 Security audited event to the audit record for that event? Privacy & Describe how the product securely transmits event logs to 18 Yes 1 Security an external audit collection facility. Privacy & 19 Start-up and shut-down [YES or NO] Yes 1 Security Privacy & 20 Unsuccessful data access attempt [YES or NO] Yes 1 Security
10 Privacy & Security Does your product transmit and store passwords in clear text? Please describe your security controls for both. Yes 1 11 Privacy & Security Please describe the products access controls. Yes 1 12 Privacy & Security Does your product support roles based and rules based access? Please describe how this is done. (users and groups) Yes 1 13 Privacy & Security Does your product enforce a session timeout after a configurable period of inactivity? Yes 1 14 Privacy & Security Can your product reference external authentication databases, specifically Microsoft Active Directory? Yes 1 15 Privacy & Security Describe your products and logging facility/capabilities. Include: - Types of security events - How and where events are logged - Access controls to the audit records - How audit records are protected from deletion and unauthorized disclosure and modification - Administrator privileges - Configuration capabilities Yes 1 16 Privacy & Security Please confirm which of the following information your product is capable of including in an audit record: Please provide as much additional information you feel is applicable. - User ID or process ID causing the event - Success or failed attempts to access security file - Date/Time of event - Event type - Success or failure of event - Success or failure of login attempt - Denial of access resulting from excessive number of login attempts - For add, change or delete events: name of data object written or deleted - Granting elevated privileges - For identification and authorization: origin of request (originating host IP address) - Discreet auditing of specific data elements Yes 1 17 Privacy & Security Does your product audit facility bind the user ID of the audited event to the audit record for that event? Yes 1 18 Privacy & Security Describe how the product securely transmits event logs to an external audit collection facility. Yes 1 19 Privacy & Security Start-up and shut-down [YES or NO] Yes 1 20 Privacy & Security Unsuccessful data access attempt [YES or NO] Yes 1
2018RFP-10_Enterprise_Content_Management.docx