It is recommended that you review your security settings:
- On a regular basis
Having scheduled reviews of your settings every six months or every quarter can help you find security issues that may otherwise go unnoticed.
- When new features or major enhancements are added to Millennium® 3
Enhancements and changes made to the system could increase or decrease the need for certain security configurations.
- When your organization changes internal policies or procedures
Internal procedure/policy changes could affect roles; reviewing rules and roles will ensure your settings are up-to-date and that you are compliant with SAS-70.
It is also recommended that you delete terminated employees and client accounts on a regular basis.
The two rules in the following sections are highly recommended. As a service bureau, it is important to restrict users at your client companies from access to your entire system.