Website security is a critical issue for our clients. TrustBenefits Online is committed to providing the highest level of security to protect confidential fund information and sensitive participant benefit data.

1. Physical Security
   
   
   • Secure File Transfer Our Data Transfer Center provides clients with an efficient, secure method for transferring data to and from the TrustBenefits Online server. Security features include separate upload and download locations to eliminate unauthorized access to data and potential data collisions and Secure Socket Layer encryption to encrypt (scramble) sensitive data such as passwords and social security numbers. All users must complete a secure login to access the tool.
     
     
   • Third party Monitoring Intrusion Detection Sensors monitor the entire system, in real time, to detect and respond to security breaches and other unauthorized activities.
     
     
   • Password Protection Personal Participant Data is password protected and access requires users to complete a secure login. All users are required to setup a user account by creating a unique user ID and password. Website security features include automatically locking user accounts after multiple instances of incorrect password entry and automatic session termination after a period of inactivity.
     
     
     
2. Application Security
   
   The TrustBenefits Online security model provides the highest available level of website security with a 3-layer, fault-tolerant environment, two network firewalls and a load balancer at each security layer to filter inbound and outbound website traffic. A primary firewall and a backup firewall are in place at each security layer.
   
   Site traffic is controlled by configuring each firewall to demand unique access criteria to gain access to the next security layer. Traffic that does not meet specific criteria for all three security layers is denied access.
   
   3-Layer Environment Details
   
   Layer 1 - Initial Security Level/Gateway to the entire security environment
   
   
   • Houses the Web server, stores all website display files
   • Web server responds to all web page requests by delivering requested pages to a user's Internet browser
   • Encrypts outgoing content
     
     
   Layer 2 - Restricts access to the Application server
   
   
   • Application server handles transactions between end-users and hosted applications or databases.
   • Application server houses software applications including online calculators, benefits estimators, and the content management system.
   
   Layer 3
   
   • Database server houses all sensitive client data
   • Most secure layer - restricted access