Keep security-question answers encrypted
Also listed as: Encrypt security-question answers
What is it?
Xelence stores the answers users give to their security questions in encrypted form, so they cannot be read directly from the database.
Why does it matter?
Less risk to user accounts if stored data is ever exposed, and stronger evidence for data-protection audits.
Start thinking about
- Which identity provider, such as Entra ID or Okta, should staff and constituents use to sign in?
- Which of your policies, such as password, session or network rules, should Xelence enforce?
- How often do you review user roles and access, and who signs off on the review?
- How quickly can you remove access when staff change roles or leave?
- What does your policy say about using generative AI with personal or sensitive information?
- How will you fit the security changes in each release into your change and testing process?