55A - RESO - DEPOSITORY SRVS - Laserfiche WebLink

Home Browse Search

Propoma/fmrHheC]rynf Saone8nm U��^��l�K��K� `��l�/� � ^ � ��o � The City will have the ability k;doognmto the rights p| each user oo the J.P. Morgan ACCESS p|mth/rrn, Products or) the portal are designed to accornirriodate a wide range of security options, including requests for mulfilde transaction approvals, demands for separate "enter" and "release' functions for users, dualconfirol among users, along with daily or transaction flimos. The separation of duties and approval workflows provide mecinarrsniq clients can, rise to help onnvoe1ha8nopomvnne|cunpmhonn\nanomo|innnincnmn`i1hmudo/nornprornisethoin1egri1yvf the, entillerrient datar Client security administrators can assign these specific transaction initiation privileges tousers. J.P. Morgan ACCESS security architecture provide-, authentication as well as authorization to, ensure that each User is permitted access to only the applications and functions established and approved far their use. When highly sensitive (value-lbearing or administrative) data is being transmitted between the User arid J.P, Morgan, additional security in the fonnnfadigital signature is required to ensure integrity. All communications between the User and J.P. Morgan are secured using SSL protected sessions Basic Authentication / Single Sign-on |n order tu establish auouaioo. line User must supply a valid War |D and Password. T hiss validation io/n°nxgedby commercially available yinA|° sign-on uuihenticmt|nn software. Once m User sign-on is complete, entitlements arc, verified for each User. The User's J.P. Morgan ACCESS screen displays only functions and accounts, for 4Z) which ho air she has been entitled access. R&ASamx0(V Only certain functions within J.P. Morgan ACCESS will require, an additional level nfnenunty� Security Administrator functions and Transai initiation entitlements (i Transfer, ACH, and Liquidi1vmodulao),|nffiese cases, Hie User must use their GooudD device tv sign onarid release value hearing transactions, The SecurlD RSA token device is a small, hand-held device, that g0harates a six-cligit secunty code every 60 seconds. This is referred to as a "token code". For these User,,, the token code must be Supplied with their ID and Password at sign on and again at the point ot transaction release. SccurlID technology provides a high level Of SeGUrily by authenticating each user and digitally signing each transaction. All of this is done, without the need for locally installed software or hardware. Once a user has received their SecurlD device, the start-up process isqoioK arid easy. 'SeCUrID s a registered trademark or tradernack of RSA Security Inc. in the 'United States and/or o�ho,rounhiao. Administration The City's security administrators will maintain established authentication IDs and digrial signature authority, Additional users can he established and approved using the, online onh|enlenl feature. A4n standard practice, J.p. Morgan requires two security administrators tub° involved iouser metupuodmainienannek>he|pdien1ummixhainreenonab|eavUit"onkuls.Addbiona||&|foocuhty administrators are to have product functions, two other security administrators must prepare and approve the proclucl furiction entitlements. Security administrators cannot request or approve product functions (p,g_ cash reporting, wire initiation, eto.) for themselves unless anaulbo,iz*d company representative has signed aopyuim|waiver. One security administrator eatab|iohou users for accounts, services (ACHin||aHivn. wire ini1ia1iun balance ropo�iog.oicJ and funohono(toanoucdnniohio8inn.tronaacdunapproval, releaser ' reporting, e1G.), while a different security administrator approves the users for the accounts, servtces arid functions established by the first security administrator. PA(jn2^ 55A-40