DECK Security
We know how important data and user security is to you. They are the most important things to us too. We’ve built security into the foundation of DECK DecisionWare. From external threats to internal user access controls, DECK Security has you covered.
Leading the way in concept and execution
Deck DecisionWare is based on the standard Java Enterprise Edition (JEE) application stack implemented in the Grails Web Application Framework, which provides a modern, rich web application development environment. Follow the link to learn more about Grails Application Framework.
The software architects at Spieker Point, the creators of DECK DecisionWare, have significant experience developing applications for financial institutions, health care, and education averaging over 20 years experience each.
The DECK DecisionWare framework is developed from top to bottom with security requirements in mind. Our approach is:
1. Only use proven, peer reviewed, secure components in the construction of the product / application.
2. Conduct risk assessments on design and implementation, providing solutions for all identified issues.
3. Provide configurable security policy that allows you to select the level and types of security features to apply to the application.
Key Features in DECK Security
User Authentication
DECK DecisionWare provides default setting for password strengths, recovery, expiration and lockout, but each customer has the ability to configure their own user authentication requirements.
Single-sign-on
Single-sign-on within a multiple application environment (by signing in to DECK DecisionWare, you automatically also sign in to Salesforce, for example) is made possible with extended authentication via LDAP, Kerberos, OAuth, and Biometric.
Database and Data Security
All the data stored in DECK DecisionWare is encrypted. The symmetric encryption key is periodically rotated and hardware protected, preventing unauthorized access of the database.
Access Control via Roles
Each user of DECK DecisionWare has access to data that is applicable to their role, which is applied via Access Control Lists (ACLs). Via the ACL’s the user then has access to a set number of Report’s, Queries, Widgets and KPI’s that are applicable to their role, making DECK DecisionWare a company wide tool.
Auditing
With DECK DecisionWare you can track any changes that’s been made within the system, by whom and when. Depending on your needs, DECK DecisionWare can even keep an audit trail for who viewed certain records.
Host DECK DecisionWare your way
Cloud Hosting
The majority of DECK DecisionWare customers choose to have their instance hosted in the cloud, through a third party of their choosing. We recommend hosting with Amazon Web Services as their scale allows them to address concerns of security, redundancy and disaster recovery in a very economical fashion. In addition, cloud hosting services are continuously evolving and upgrading their infrastructure and services. It is relatively easy to upgrade to new components with no additional capital expenditures.
Local Hosting
In some cases hosting your instance of DECK DecisionWare locally may suit you better. DECK DecisionWare can run in any computing and network environment and the customer is free to select the various host computing hardware, operating system, database, networking and security components that they like as long as the meet or exceed the security requirements specified in the Security Considerations section as outlined in Spieker Point’s Application Deployment Plan.
Additional DECK Plugins
{Your Plugin Here}Wish there was extra functionality within DECK DecisionWare in order to make it a complete solution for you? Tell us about it! We provide custom plugins for our customers all the time and it’s how we marry our product offering with our service offering of custom software development. |
About the Developers
DECK DecisionWare is built and maintained by Spieker Point Inc. in Edmonton, Alberta, Canada. In 2011 we started the development of DECK DecisionWare with the goal of providing extensive core functionality, without limitations to customization found with commercial-off-the-shelf products. Allowing our customers to get exactly what they need to excel in their market.
Connect
Get the Latest News
Keep up to date by signing up for the newsletter.