Security & Audit

PMWeb has an extensive security module which limits what actions each user or user group can perform. Security levels can be set for individuals or user groups by combinations of:

1. System - Program - Project
2. Feature (view or no view)
3. Record (Add, View, Delete, Update)
4. Field (view, update).

The security is also tied to the Document Manager Folders where users can be limited on whether they can Upload, View, Redline, etc. individual folders.

The net result is a single database to which a Client can provide access to anyone it wishes, to whatever level it wishes, with complete security - managed through a simple "point and click" interface

Program Managers, Project Managers, Site Managers, Procurement Officers, Contract Administrators, Contractors and Consultants can access data relevant to their activities only and input data that is then processed through automated Workflow. Stakeholders can also be given access to dashboards and to processes where their review and/or approval are required. Executive Management will have immediate access to real-time data presented via customised Dashboards designed for their specific areas of interest-with the ability to drill down to all underlying data to view and interrogate that data in real time.

A single user can maintain multiple roles, to allow for functional needs, hierarchy, or matrix organizational roles. This can be achieved at both user security level, where the user can be assigned to multiple groups with differing access permissions; and in all Workflows, where a user’s workflow roles can be multiple at all levels.

The security protocols also allow any feature not accessible to a User to be “turned off” in terms of what that User sees when logging into PMWeb. This creates a streamlined, uncluttered visual environment for each User, who will see only what they need to see.

A screen shot of the Controls is as follows:

Identity management

PMWeb provides built-in identity management including configurable password expiration; and history and complexity settings that can be expanded with Active Directory/LDAP integration and/or SAML support.

Active Directory (AD) authentication can be achieved with PMWeb’s LDAP Integration utility. This utility allows for AD users to be integrated into PMWeb’s login page thus activating single sign-on (SSO) functionality.

PMWeb similarly supports the OASIS-ratified SAML 2.0 standard.

TLS/SSL

TLS/SSL encryption provides a high level of data security between the browser and PMWeb server

Audit

PMWeb’s functionality that comes “out of the box” tracks user interactions as follows:

• The IP address of each User log-in is recorded
• Uploaded documents are logged with who uploaded what when
• There are security rights to prevent users from deleting; or “versioning” control, which has users uploading new versions as opposed to deleting
• Each record maintains who created and updated the record last and at what time
• Create quick Reports and export to Excel
• Workflow all users comments, username, and timestamps are logged for each step in a record’s workflow.