Keeping Member Data Safe ZIMS Security Species360 takes its responsibility to utilize security protocols to ensure the privacy and security of submitted data very seriously.  The Data and Privacy Policy, approved by the Species360 Board, has been in place since 1995.  Our approach to Species360 ZIMS security involves 4 key elements: data security, technical security, application security, and collection security.  Keeping Member Data Safe

ZIMS Updates! This PowerPoint is up-to-date as of: November 12th 2018 ZIMS is developed in an “agile” method This means that it is updated every two weeks, sometimes with additional releases in between! Use the link below to see if there have been any updates to this topic since the date above: http://training.species360.org/updates/

Data Security Hosted at a secure, offsite facility Backed up on a daily basis The ZIMS database is hosted at a secure, offsite facility. ZIMS data is backed-up at multiple physical locations and stored on a fault tolerant, expandable storage area network, featuring RAID 5 disk array with hot swappable spare drives. It is backed-up on a daily basis with maximum care given to protect our member’s data in case of an emergency.

Technical Security Professionally hosted Microsoft standards The application and database is professionally hosted by a Type II SSAE 16 SOC 1 certified hosting facility and includes Cisco firewalls, 256 bit SSL encryption, regular security audits, and 24x7 monitoring against attacks. The application and database is built with Microsoft standard authentication, encrypted passwords, role-level security trimming, isolation of Database from UI and business logic, only authorized application servers can access database, audit stamp for each database record, and database-level change audit to track update.

Application Security Role-based access Limitations on active sessions Limitation to IP addresses Local Admin review ZIMS provides role-based access to virtually every component of the application, which provides discreet control for each institution’s administrator to configure users with the ability to add, edit, read, and/or delete records in any combination needed to secure your data. ZIMS can limit users to only one active session at a time, if desired. So if they are logged in at one computer they cannot log into another until the initial session is ended. ZIMS can limit access to only pre-approved Internet Protocol (IP) addresses (e.g., the member’s network, specific remote locations, etc.). You can limit access only to computers at your institution if you want so Users will not be able to access ZIMS in an inappropriate environment. The Local Admin can choose to review a user’s activity log, roll back certain transactions, edit incorrectly entered ones, and terminate any user session or access, as needed.

Collection Security Advanced Access Management External Sharing ZIMS allows a member to structure and restrict its own staff's access to its own animal data by taxonomic rank (e.g., mammals, birds, reptiles) or even to a single specific animal. This functionality is called Advanced Access Management and we would like to thank the St. Louis Zoo for sponsoring this premium functionality. This is an optional feature and must first be activated at a facility by the Species360 Global Administrator and then turned on by the institution’s Local Administrator. Institutions may also choose to share additional information about a given taxonomic rank (e.g., mammals, birds, reptiles) or even just a single specific animal with other institutions, if desired, to facilitate animal moves between institutions.  This is also useful for animals on loan so the owner can better track how they are doing. This is an optional feature, and the default setting is to only share data as per standard policy.

ZIMS Data You can sleep easy, your data is Safe and Sound You can sleep easy. Your ZIMS data is safe and sound. ZIMS Data