Laserfiche WebLink
Security Policies and Procedures <br />Mixpanel <br />Users who have access to Mixpanel have General Access. User sessions do not <br />automatically time out, the user is required to log out at the end of a session. <br />Kissmetrics <br />Users who have access to Kissmetrics have General Access. User sessions do not <br />automatically time out, the user is required to log out at the end of a session. <br />Salesforce <br />Users who have access to Salesforce have General Access. User sessions <br />automatically time out after twenty (20) minutes. <br />Segment.io <br />Users who have access to Segment.io have General Access. User sessions do not <br />automatically time out, the user is required to log out at the end of a session. <br />B. Access Rules <br />User IDs and accounts must be authorized to access only those elements needed for the <br />user's role, including: <br />1. Limiting access to datasets and types <br />2. Limiting access to operating systems <br />3. Limiting times of access <br />Access to operating systems, ad hoc transaction capabilities, software development <br />tools, and other system devices must be controlled and limited to only those User IDs <br />which require that access. <br />Segregation of duties shall be established for all information asset controls to minimize <br />the possibility that one person is responsible for an entire asset. <br />A user (and hence User ID) that changes role or job function must have access rights <br />updated to match the new job role or function. Any changes will be documented in the <br />Responsibility Change Log. <br />C. Temporary Privileged Users and Accounts <br />Temporary privileged users are defined as those who: <br />1. Have any control over security tools on an application, system or network <br />2. Can update operating systems or similar tools <br />3. Can directly modify data within a database or application <br />4. Have any special capabilities built in by the vendor of the application <br />software, operating system or platform <br />Rev.2015.8.6 <br />30 <br />