Security and governance

Secure officer authentication

Passwords are hashed. The session cookie is HTTP-only. The demonstration account cannot open restricted data.

Multi-factor authentication

Restricted actions require MFA. Enrolment is not configured, so the server returns access denied.

Role and case permissions

The foundation reviewer role can open the empty portal. It cannot grant itself an external lookup.

Approval workflows

A restricted request has no approval path yet, so it stops.

Audit trails

Successful and failed sign-in attempts are written to the local audit table when that table exists. The audit row does not store the password.

Encryption and data protection

Use the site over HTTPS outside this computer. Do not load real personal data into the demonstration database.