This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
memory-hard, one-way key derivation function,
providing strong resistance to attacks.
D.11 Does system support multi-factor authentication? ☒ Yes Please provide additional information below:
☐ No MFA is enabled by default and required for both
administrative and user accounts. Supported
methods include OKTA, SAML, OIDC, Google
Authenticator, SMS, Azure MFA, and
customer-owned solutions. MFA is enforced for
privileged and non-privileged accounts, and is
required for remote access and sensitive
operations.
APPLICATION TECHNICAL CONTROLS COMPLIANCE COMMENTS/ADDITIONAL INFORMATION
Security Administration
D.12 Does system log unauthorized access attempts by date, time, ☒ Yes Please provide additional information below:
User ID, device and location? ☐ No The system logs unauthorized access attempts and
captures event date/timestamp, user identity,
event source, and where the event occurred. Device
and location information are included as part of
event details where available. All successful and
unsuccessful log-on attempts are logged for audit
purposes.
D.13 Does system maintain an audit trail of all security maintenance ☒ Yes Please provide additional information below:
performed by date, time, User ID, device and location? Is this ☐ No The system maintains detailed audit trails for
information easily accessible? security maintenance, including date, time, user ID,
device, and location. Audit records are accessible,
searchable, and can be processed and reported
on-demand. The system supports customizable
reports and centralized review, ensuring
information is easily accessible for investigation and
compliance.
Page 15 of 19Jump to an indexed page (163 of 163)