Security Settings

This group of settings are located on the Security tab.

Interviewer Account Locking

You can configure CATI Supervisor to perform automatic locking of any interviewer account in case there were more consecutive unsuccessful login attempts than it is specified in the corresponding setting.

When an interviewer's account is locked he/she would not be able to log into the system when they start the CATI Interviewer Console. The Console displays the appropriate warning message when such login attempt is executed, and it would not log the interviewer in.

Also any interviewer account can be locked and unlocked by the supervisor manually - this can be done by using a corresponding command from the Interviewers list (see Locking and Unlocking the Interviewer's Account for details).

Note that enabling the interviewer account locking option DOES NOT lock the interviewer account immediately - it only instructs the system to lock this account when the specified number of consecutive unsuccessful login attempts is reached. For immediate interviewer account locking, use the procedure described in Locking and Unlocking the Interviewer's Account.

Automatic account locking option setup is performed on the Settings tab of the Resources object. To enable this option tick the box in front of the option name.

Automatic account locking settings are available company wide - they affect all interviewers belonging to the current company.

When an account is locked out an email will be sent to the address(es) specified.

Any interviewer account which has been locked by the system automatically can later be unlocked by the supervisor manually - refer to Locking and Unlocking the Interviewer's Accountt for instructions. Manual account unlocking is the only way to unlock the interviewer account that has been locked automatically.

Password Management Settings

There are three options aiding in password management. These options are also company wide - they affect all interviewers belonging to the current company. To enable each option you should tick the box in front of the option name. The following options can be configured on the Settings tab:

• "Enable interviewer password expiration", which allows setting the limit for password expiration (in days), and specifying if the expired password could be reset to the same one as before;
• "Enforce minimum password length", which enables checking of the minimum number of symbols entered into the "Password" field when the password is created;
• "Enforce complex passwords", which enables checking if the newly created password contains at least 1 upper case character and 1 non-alphanumeric character. Passwords that fail to satisfy this rule are rejected.
• "Enforce Password Change on First Login", which forces interviewers with newly created accounts to change their password upon first login.

Do not forget to click the Save button on the toolbar above the right frame whenever you alter any setting. The Save button starts blinking when you make any change to the settings prompting you to save the changes made.

Export File and Report Encryption

The CATI Supervisor module allows for compliance with laws and regulations regarding data transfer operations which involve personally identifiable information (PII). To this end all export operations, and also creation of reports which include PII, can produce files encrypted using the PGP encryption technology. This makes it possible to allow access to PII contained in such files only to persons who possess specific PGP private security key.

To enable this functionality in the CATI Supervisor module, the following settings in the Forsta Professional Authoring application must be configured:

• The "PGP Encryption" add-on module must be enabled;
• The "Always use encrypted file transfer" security option must be enabled.

Refer to the Professional Authoring documentation for information regarding these options.

When the above options are enabled in the Professional Authoring module, a corresponding option becomes accessible in the CATI Supervisor UI. The Always use encrypted file transfer option on the Security tab of the Settings menu (Resources tab in the Navigation menu) should be enabled to turn on encryption of exported files.

When the "Always use encrypted file transfer" box is checked, the following export files will be encrypted:

• Interview/call list (go to Exporting the Interview/Call list for more information).
• Call History (go to Exporting Call History Data for more information) and a number of scheduled exports delivered by email as configured on the General tab of the Resources/Settings menu (go to General Settings for more information).
• Telephone Number Blacklist (go to Telephone Number Blacklist Overview for more information).

This setting is applied for all users within the company who have access to the CATI supervisor UI. Only one user PGP key is used for encryption of all types of exported files. To specify which private key will be used for encryption, enter the name of the user account in the "User account to be used when encrypting email attachments" field.

When the above described procedures are carried out, encryption takes place automatically without any visual indication when the "Export" operation is performed. User does not have to take any extra action at this moment.

To disable the Export Encryption feature, uncheck the Always use encrypted file transfer box in the Security tab.

Only users with pre-configured private PGP encryption keys and software will be able to decrypt the encrypted export files.