Overview
A robust internal security plan begins with a clear understanding of user access. By managing who can see and do what within your system, you significantly reduce the risk of unauthorized activity.
🔐 Implement Limited Access
While Administrators have full site access, most team members only require specific tools to complete their daily tasks. Assigning limited access helps protect your firm's data.
Custom Permissions: You can authorize a user to add payments or search transactions while specifically restricting their ability to process refunds.
Security Goal: This "least-privilege" approach ensures that even if a secondary account is compromised, the potential damage is minimized.
👤 Individual Accountability
To maintain the integrity of your firm's data, it is critical to track who performs which actions.
No Shared Logins: Do not allow employees to share login names or passwords.
Unlimited Users: ClientPay provides for unlimited users—take advantage of this by creating a unique, individual profile for every person using the software.
Audit Trail: Every major action in the system is stamped with a username, making individual accounts essential for accurate record-keeping.
🧹 Proactive Maintenance
Security is an ongoing process. Regularly auditing your user list is just as important as the initial setup.
Delete Inactive Users: Immediately remove users who are no longer with the firm. This prevents potential security breaches following an employee's termination.
Regular Audits: Periodically review your active user list to ensure that current access levels still align with each employee's current role.
The Bottom Line: Properly implemented and maintained user controls are the most effective way to limit vulnerabilities and establish lasting operational security for your firm.