The General Data Protection Regulation (GDPR) paves the way for further data security measures being put in place within our organisations.
Although not a requirement for the GDPR (25th May), this increased focus on data security hasn’t gone unnoticed by the team here at Youmanage. That’s why we’re introducing many new features to support clients in their Data Security efforts, in line with best practice.
Two Factor Authentication
Two Factor Authentication, also known as 2FA, two step verification or TFA (as an acronym), is an extra layer of security that is known as "multi factor authentication" that requires not only a password and username but also something that only, and only, that user has on them. We are building this into Youmanage as an option to be set up – when 2FA is switched on, an email with a verification code will be sent to the user to further secure the account. This doesn’t have to be switched on for everyone – you can choose to have 2FA switched on for only Admin users, only HR users, and so on.
In order to help you to mitigate potential data security risks, you can now set up your own password expiry periods in line with your own data security policies. You will be able to set up a password expiry period to ensure users are updating their passwords as regularly as you deem necessary.
Password Complexity (and length)
You can dictate the length & complexity requirement for all users of your Youmanage instance. For example, you can choose that your users’ passwords must include capital letters, numbers, special characters and so on, or a combination of the above but not all. You can then choose whether the password needs to be 6 characters, or 10 characters, for example.
The Lock-Out Policy allows clients to dictate the number of times a user can attempt to log-in before they get locked out of the system for – and then how long a period of time they should be locked out for before they can re-try logging in.
If you have any questions regarding the data security measures we are implementing above, or would like to find out how Youmanage can support your compliance efforts, please get in touch with us at firstname.lastname@example.org, or by calling us on 01786 458037.