Project

General

Profile

Actions
Copy link

Feature #93822

open

HUMS Security FAT

Added by Zaldy Conrad Tungcap 5 months ago. Updated 4 months ago.

Status:
Assigned
Priority:
High
Assignee:
Ilango Chandrasekaran
Category:
-
Target version:
-
Start date:
29/05/2026
Due date:
% Done:

4%

Estimated time:
(Total: 0:00 h)
Dev Due date:
Release date to QA:
Issue released on:
Dev

Description

The purpose of System Security plan is to provide an overview of the security requirements of the system and describe the controls in place or planned, responsibilities and expected behavior of all individuals who access the system.

Subtasks 34 (34 open — 0 closed)

Task #93824: Authentication/Verify strong password enforcementCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93825: Authentication/Verify account lockout after failed attemptsAssignedDaniyal Ansari29/05/2026

Actions
Task #93826: Authentication/Multi-Factor AuthenticationQAMangesh Pangrekar29/05/2026

Actions
Task #93827: Authorization/Verify role-based access controlCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93828: Authorization/Verify unauthorized access preventionAssignedZaldy Conrad Tungcap29/05/2026

Actions
Task #93829: Authorization/Verify privilege escalation preventionCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93830: Data Protection/Verify encryption of sensitive dataAssignedDaniyal Ansari26/06/2026

Actions
Task #94360: Medcare Patient Demographic EncryptionQAMangesh Pangrekar26/06/2026

Actions
Task #94361: Attachments PDF/DOC has to be encryptedAssignedMehdi Mehdi26/06/2026

Actions
Task #94362: Patient Demographics in Clinicare has to be encryptedAssignedMehdi Mehdi26/06/2026

Actions
Task #93831: Input Validation/Verify SQL injection preventionAssignedMehdi Mehdi29/05/2026

Actions
Task #93832: API Security/Verify API authenticationCodedIlango Chandrasekaran29/05/2026

Actions
Task #93833: Network Security/Verify HTTPS enforcementCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93834: Compliance/Verify regulatory compliance controlsInsufficient InformationZaldy Conrad Tungcap29/05/2026

Actions
Task #93835: Data Integrity/Verify record integrity controlsAssignedDaniyal Ansari29/05/2026

Actions
Task #93836: Security Configuration/Verify default account managementAssignedZaldy Conrad Tungcap29/05/2026

Actions
Task #93837: Input Validation/Verify cross-site scripting preventionAssignedDaniyal Ansari29/05/2026

Actions
Task #94434: Verify session timeoutAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94435: Verify database backup encryptionAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94436: Verify audit logging for critical activitiesAssignedMehdi Mehdi01/07/2026

Actions
Task #94437: Verify audit log tamper protectionCodedIlango Chandrasekaran01/07/2026

Actions
Task #94438: Verify malicious file upload preventionAssignedMehdi Mehdi01/07/2026

Actions
Task #94439: Verify secure cookie configurationAssignedMehdi Mehdi01/07/2026

Actions
Task #94440: Verify masking of sensitive informationAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94441: Verify consent management controlsAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94443: Verify suspicious activity alertsAssignedDaniyal Ansari01/07/2026

Actions
Task #94444: Verify recovery proceduresAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94445: Verify secure password reset processAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94446: Verify secure integration channelsAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94447: Ensure that form elements include clearly associated labelsInsufficient InformationZaldy Conrad Tungcap01/07/2026

Actions
Task #94448: Verify API rate limitingAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94449: Verify backup schedulingAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94450: Verify automatic logout on shared terminalsAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94451: Verify secure mobile accessInsufficient InformationZaldy Conrad Tungcap01/07/2026

Actions

Related issues 2 (2 open — 0 closed)

Related to HUMS Hospital - Gaps #94313: CLINICARE > PDPA RESTRICTIONAssignedMehdi Mehdi24/06/2026

Actions
Related to HUMS Hospital - Gaps #93910: Master > PMS Master > StaffMaster. Unauthorized Access to Inactivate Employee Account via Direct URL in PMS Master ModuleQAMangesh Pangrekar04/06/2026

Actions
Actions
Copy link
 #1

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93824 added
Actions
Copy link
 #2

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93825 added
Actions
Copy link
 #3

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93826 added
Actions
Copy link
 #4

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93827 added
Actions
Copy link
 #5

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93828 added
Actions
Copy link
 #6

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93829 added
Actions
Copy link
 #7

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93830 added
Actions
Copy link
 #8

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93831 added
Actions
Copy link
 #9

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93832 added
Actions
Copy link
 #10

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93833 added
Actions
Copy link
 #11

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93834 added
Actions
Copy link
 #12

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93835 added
Actions
Copy link
 #13

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93836 added
Actions
Copy link
 #14

Updated by Zaldy Conrad Tungcap 5 months ago

  • Subtask #93837 added
Actions
Copy link
 #15

Updated by Kierthini Nethi 4 months ago

  • Related to Gaps #94313: CLINICARE > PDPA RESTRICTION added
Actions
Copy link
 #16

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94434 added
Actions
Copy link
 #17

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94435 added
Actions
Copy link
 #18

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94436 added
Actions
Copy link
 #19

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94437 added
Actions
Copy link
 #20

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94438 added
Actions
Copy link
 #21

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94439 added
Actions
Copy link
 #22

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94440 added
Actions
Copy link
 #23

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94441 added
Actions
Copy link
 #24

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94443 added
Actions
Copy link
 #25

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94444 added
Actions
Copy link
 #26

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94445 added
Actions
Copy link
 #27

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94446 added
Actions
Copy link
 #28

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94447 added
Actions
Copy link
 #29

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94448 added
Actions
Copy link
 #30

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94449 added
Actions
Copy link
 #31

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94450 added
Actions
Copy link
 #32

Updated by Zaldy Conrad Tungcap 4 months ago

  • Subtask #94451 added
Actions
Copy link
 #33

Updated by Kierthini Nethi 4 months ago

  • Related to Gaps #93910: Master > PMS Master > StaffMaster. Unauthorized Access to Inactivate Employee Account via Direct URL in PMS Master Module added
Actions
Copy link

Also available in: Atom PDF