These tests are performed quarterly and all standards must be met to maintain the TruSecure certification. Additionally, TruSecure provides on-going security consulting and updates ByAllAccounts on the latest developments in security technology as well as alerts against the latest intrusion techniques and viruses. ByAllAccounts has also contracted Predictive Systems, a top Internet security firm, to review the WebPortfolio architecture, implementation, and deployment to ensure a solid and tightly secure software and hardware environment. When investors provide their account numbers and access codes, the data is immediately encrypted and stored off-site at a highly secure web hosting facility that uses double firewall protection to secure the site from unwanted entries. ByAllAccounts has authorized only a small number of key employees to have access to its high-security hosting facility.
Access is for system upkeep and maintenance only.
Each person must undergo a series of identification checks to gain entry to the facility, including a biometric hand scan and photo identification. While in the facility, the person is accompanied at all times by a security officer, and all actions are monitored and recorded by a video surveillance system. Investors will still get the same consolidation, customization, and analytics offered by WebPortfolio, but will have to manually update their holdings instead of getting a daily, automatic update. ByAllAccounts supports symmetric 128-bit encryption for the maximum level of security supported by the latest Microsoft and Netscape browsers. All personal user information is stored in an encrypted format in the ByAllAccounts database, and is transmitted in that encrypted format within the network.