INFOSEND, INC. 3 - 2015 - Laserfiche WebLink

Home Browse Search

InfoSend Responses— 1272972008 REQUIREMENTS AND SCOPE OF WORK 1, This requirement is met, The City will choose what it wants to call the EBPP application and add a button/link to www,ci.santa-ana.ca.us to give customers access to It. Once clicked, this link will take the customer to the EBPP portal that InfoSend will host. 2. This requirement Is met. infoSand will match the "look and feel" of the City's current site. 8. This requirement is met, InfoSend's technical team has reviewed the Section 508 standards and they are already compatible with our EBPP programming methods. 4. This requirement is met. All information Is confidential and protected, User passwords are stored using a one-way hash and cannot be read by anybody. The application is hosted by physical three-tier layer architecture. The presentation server, the application server, and the database server are separated onto different physical networks. Users can only connect to the presentation server over 128 -bit SSL in order to ensure that all information passed from the customer to the application is encrypted. Anti -fraud features such as Address Verification Service (AVS) and Credit Card Security Coding (CSC) are used when payment transactions are processed. Unauthorized users cannot access utility account data, bank account or credit card numbers, or other payment information. The data that InfoSend transmits to its payment processors is encrypted. Industry standard security methods safeguard data and external site monitoring scans for open ports or other security Issues. Proper access control methods insure that internal users can only access the data relates to their job functions. While InfoSend uses the Windows operating system for internal processing, the EBPP application itself is hosted on Red Hat Enterprise servers, InfoSend elected to use this operating system for its web hosting because Independent studies have shown it to have less critical security flaws than Windows has had over the years. Physical facility security measures are in place to prevent unauthorized access to data. Security cards/tokens are required to enter the building. Visitors must be signed in before entering. All servers are centrally located and only authorized staff members ran access them. The City can choose between many security options to protect customer data; a. To enroll for the EBPP service customers can be forced to enter more than just their account number (which is the basic requirement). The City can choose additional data fields — like previous bill amount, le. The City can choose to use security cerdfioates on outgoing smalls. This will allow the customer to verify that the email came from the City's EBPP application. e. The City can choose to simply email Its customers a link to the EBPP portal to view the newest online bili, or It can email the bill itself. Encryption can be used to ensure that the emails are only accessible by the customer who enrolled for the service. 25H-15 3