Best Practices for Account Security
When it comes to account security, best practices and industry standards center around the following principles:
- Preparation
- Detection & analysis
- Containment, eradication, & recovery
- Post-incident activity
At BambooHR, we strive to implement these principles in helping customers address and resolve instances where they believe a data or security issue has taken place.
Review the audit trail
It is a good idea to review the Audit Trail report in BambooHR to see who made changes in your account, what the changes were, and when they occurred. If you need help reviewing the Audit Trail report, check out our help guide.
Access level changes
WIth different levels of access in your account, it is best practice to check your access level settings to see if you may have granted individuals access to information they should not see. Remember that you can preview as different users in the company to confirm what they should see.
Reset passwords
If you have any internal systems that could be at risk, it is best practice to encourage your employees to reset their passwords periodically. Please note that if you ever were to uncover a compromised/fraudulent password situation, additional action may be required from your internal IT/security team.
Disable users
If there is a security issue you are waiting to have resolved, you may want to temporarily disable access for specific users in your account.
Check payroll data
If you have Payroll enabled in your account and feel that payroll data has been implicated in your situation, it is a good idea to have affected individuals review their current information, such direct deposit, to ensure it is correct.
Multifactor authentication
90% of issues can be avoided with multifactor authentication. If the 2-Step Login feature is required for all employees at your company, please visit this help guide for more details and FAQ about 2-Step Login.
Note: In these matters, we will try to assist you within the realms of our software's capability and impact, but some aspects of an issue may require additional customer support outside of where BambooHR can help.