Is my WebCATS database secure?
Yes! OutreachSystems provides state-of-the-art Client Activity Tracking Systems that are designed to never compromise your clients' data. We know that security is crucial to you and your clients, which is why we also make security our top priority.
Physical Security
Your WebCATS database is hosted by OutreachSystems in our off-site secure co-location facility. The co-location facility is managed by Time Warner and provides 24-hour physical security, redundant electrical generators, redundant data center air conditioners and other back-up equipment designed to keep servers continually up and running. Unauthorized users are not able to access the WebCATS servers where your database is hosted.
SQL Server Security
WebCATS is based upon the robust Microsoft SQL Server database that is capable of handling thousands of records and multiple concurrent users. All database transactions utilize TSQL stored procedures for increased database security and efficiency.
Only OutreachSystems staff has direct access to the SQL Servers. Passwords used by the Outreach staff are changed on a regular basis.
Access ID and Password
WebCATS is accessible on the Web using Internet Explorer, Mozilla Firefox, Google Chrome and Apple Safari. WebCATS is designed to limit online access to those users possessing the username and password associated with your account(s). One administrator account will be provided when your database is initially configured. The administrator assigned by the lead center will be responsible for providing usernames and passwords to all users. Generally speaking it is recommended that users do not share login accounts and that the passwords assigned to each user include letters, punctuation, symbols, and numbers.
Additionally:
- Whenever possible, you should use at least 14 characters or more.
- The greater the variety of characters in your password, the better.
- Passwords should use the entire keyboard, not just the letters and characters you use or see most often.
Encryption
Your WebCATS database is accessible via a secure https URL. The encryption technology in place (currently, RC4 128 bit SSL/TLS) allows for the protection of data in transit between your computer and ours.
The off-site backups are encrypted when they leave the primary co-location facility.
Firewalls
The WebCATS servers include "firewalls" that we monitor and that are designed to protect against unauthorized access to our systems.
Timeout
Our system is designed to log you off automatically after one hour of inactivity.
How to Protect Yourself Online
Beyond the security measures offered by OutreachSystems, each user should also exercise certain precautions to protect themselves and the WebCATS data from unauthorized access.
User ID and Password
Users should follow these rules to protect themselves and the data in the WebCATS database:
- Never disclose your username or password to anyone else.
- Memorize your username and password, and make sure not to write them down.
- Don't use birth dates, names, or other easily guessed combinations of letters or numbers
- Don't be taken in. OutreachSystems will never send you an e-mail asking for your username or password.
In addition to the recommendations listed above, administrators should also be aware of all employees who are no longer with your organization. Usernames and passwords associated with employees who have left your organization should be immediately revoked. Users who believe that their passwords have been compromised should immediately notify their administrator and change their password.
Log Out
When you are done online, log off. We suggest you do this before you shut your computer off.
Individual Computer Security
All users should protect their own computer by doing these things:
- Keep your operating system and browser up to date.
- Install a personal firewall.
- Install anti-virus software and keep it up to date.
- Scan your computer for spyware on a regular basis.
- Never download programs or files from unknown sources.
Want more? Browse our extensive list of WebCATS FAQs.