Laserfiche WebLink
• Separating duties, accounts and approval workflows, the City can help <br />reduce the risk of fraud or compromised data. The City's security <br />administrators are the only individuals able to assign users with <br />transaction initiation privileges. <br />• Limiting each ACCESS Online user to a single, designated computer. <br />• Establishing transaction and daily aggregate limits at the account and <br />user level. <br />• Creating templates with payment details to prevent wires from being <br />initiated and executed without prior approval of the recipient bank <br />account numbers and template details. <br />To help meet client audit controls, J.P. Morgan requires two security <br />administrators to be involved in user setup and maintenance. Additionally, if <br />security administrators are entitled to use product functions, such as cash <br />reporting, wire initiation, etc., two other security administrators must prepare <br />and approve the product function entitlements. <br />Dual control is enforced as follows: <br />i One security administrator establishes users for: <br />Accounts and services: ACH initiation, wire initiation, balance <br />reporting, etc. <br />• Functions: Transaction initiation, transaction approval, release, <br />reporting, etc. <br />• A different security administrator approves the users for the accounts, <br />services and functions established by the first security administrator <br />To provide a complete audit trail, the system date and time - stamps all actions <br />executed within the portal and associates those to the user who performed them. <br />After three tries to enter the correct password, the system disables /suspends the <br />log -on ID. Users will need to call the help desk and answer questions to confirm <br />their identity, such as ID and date of birth. The help desk will then enable the log- <br />in ID. <br />This can also be reactivated online if the user can successfully answer a <br />previously stored set of challenge questions. <br />ACCESS Online will allow a basic user to attempt to log on three times before <br />disabling that login. If users have payment initiation entitlements and /or a <br />SecurID device, they will be allowed five attempts to log on before disabling. <br />The total count is cumulative per user, not based on dial -in or log -in. When the <br />user does enter the correct password, the count is reset to zero. <br />Page 55 aJ. C.1V1{ rgan <br />55E -150 <br />