PointClickCare - Long-term Care Nursing Home Clinical and Financial Software for Long-term Care Nursing Homes.

SECURITY

Security & Reliability

Security and reliability are of critical concern when organizations migrate their information systems to the Internet. Wescom, in co-operation with our data center hosting partners, provide a layered approach to security by utilizing some of the most advanced and proven technologies for Internet security. PointClickCare.com is hosted with the world's premier providers of internet data centers, IBM and MCI, to ensure that customer data is protected at military and banking security levels while providing 99.9% reliability.


	99.9% Availability		PointClickCare.com production equipment is designed to provide the highest levels of reliability to our customers. The data center is staffed to monitor the equipment 24 X 7 X 365 and employs multiple levels of redundancy for electrical power, internet connectivity and system failure to minimize the effect of any failure on the end users. The result of having the system running in a world-class data center is that PointClickCare.com has a significantly higher level of availability than internally hosted applications. Wescom provides a 99.9% uptime guarantee.
	Physical Security		The PointClickCare.com production equipment is located at a secure data processing center that maintains 24-hour on-site security and all customers are escorted to and from their equipment. Entry into the data center requires photo ID and palm print scan clearance.
	User Validation and Session Cookie		Each PointClickCare.com user is assigned a unique user id and password. Wescom customer data can be accessed only with a valid username and password combination, which is encrypted via SSL for Internet transmission to prevent theft. Once a PointClickCare.com session has been established, an encrypted session ID cookie that does not contain username or password information is used to identify the user. For added security, the session key is automatically scrambled and re-established in the background at regular intervals, and is not saved on the user’s computer when the session ends.
	Firewall Protection		A strong perimeter defense is essential to prevent unauthorized or inappropriate system access. Wescom secures the perimeter of the PointClickCare.com servers with hardware and software based firewall systems.
	SSL Data Encryption		The strongest available encryption protects all Wescom customer data transmitted over the Internet. An SSL certificate signed by authentication leader Thawte and bearing the www.pointclickcare.com name, as well as the lock icon in the corner of the user's browser, assures customers that their data is fully shielded from access while transmitting. Wescom Solutions leverages the strongest encryption currently supported by browsers, using a 1024-bit RSA public key and letting users access their data with either 40-bit or 128-bit encryption from their browsers.
	Application Security		Similar to multiple ATM machines accessing a centralized banking system, our robust, custom-built application security model prevents one PointClickCare.com customer from accessing another customer's data when accessing our centralized database system. This security model is reapplied and enforced for the entire duration of a user session.
	Access Control		PointClickCare.com customers can limit access points to their data. Access controls can be set for each user or group of users limiting their access to specific IP addresses.
	Reliability and Backup		In the event of a catastrophic event or failure (e.g. earthquake), all customer data is backed up to tape every night, up to the last committed transaction. Wescom Solutions further enhances our reliability measures by storing customer data in an offsite, disaster-proof vault.