Project

General

Profile

Actions

Feature #93822

open

HUMS Security FAT

Added by Zaldy Conrad Tungcap 5 months ago. Updated 4 months ago.

Status:
Assigned
Priority:
High
Category:
-
Target version:
-
Start date:
29/05/2026
Due date:
% Done:

4%

Estimated time:
(Total: 0:00 h)
Dev Due date:
Release date to QA:
Issue released on:
Dev

Description

The purpose of System Security plan is to provide an overview of the security requirements of the system and describe the controls in place or planned, responsibilities and expected behavior of all individuals who access the system.


Subtasks 34 (34 open — 0 closed)

Task #93824: Authentication/Verify strong password enforcementCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93825: Authentication/Verify account lockout after failed attemptsAssignedDaniyal Ansari29/05/2026

Actions
Task #93826: Authentication/Multi-Factor AuthenticationQAMangesh Pangrekar29/05/2026

Actions
Task #93827: Authorization/Verify role-based access controlCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93828: Authorization/Verify unauthorized access preventionAssignedZaldy Conrad Tungcap29/05/2026

Actions
Task #93829: Authorization/Verify privilege escalation preventionCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93830: Data Protection/Verify encryption of sensitive dataAssignedDaniyal Ansari26/06/2026

Actions
Task #94360: Medcare Patient Demographic EncryptionQAMangesh Pangrekar26/06/2026

Actions
Task #94361: Attachments PDF/DOC has to be encryptedAssignedMehdi Mehdi26/06/2026

Actions
Task #94362: Patient Demographics in Clinicare has to be encryptedAssignedMehdi Mehdi26/06/2026

Actions
Task #93831: Input Validation/Verify SQL injection preventionAssignedMehdi Mehdi29/05/2026

Actions
Task #93832: API Security/Verify API authenticationCodedIlango Chandrasekaran29/05/2026

Actions
Task #93833: Network Security/Verify HTTPS enforcementCodedZaldy Conrad Tungcap29/05/2026

Actions
Task #93834: Compliance/Verify regulatory compliance controlsInsufficient InformationZaldy Conrad Tungcap29/05/2026

Actions
Task #93835: Data Integrity/Verify record integrity controlsAssignedDaniyal Ansari29/05/2026

Actions
Task #93836: Security Configuration/Verify default account managementAssignedZaldy Conrad Tungcap29/05/2026

Actions
Task #93837: Input Validation/Verify cross-site scripting preventionAssignedDaniyal Ansari29/05/2026

Actions
Task #94434: Verify session timeoutAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94435: Verify database backup encryptionAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94436: Verify audit logging for critical activitiesAssignedMehdi Mehdi01/07/2026

Actions
Task #94437: Verify audit log tamper protectionCodedIlango Chandrasekaran01/07/2026

Actions
Task #94438: Verify malicious file upload preventionAssignedMehdi Mehdi01/07/2026

Actions
Task #94439: Verify secure cookie configurationAssignedMehdi Mehdi01/07/2026

Actions
Task #94440: Verify masking of sensitive informationAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94441: Verify consent management controlsAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94443: Verify suspicious activity alertsAssignedDaniyal Ansari01/07/2026

Actions
Task #94444: Verify recovery proceduresAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94445: Verify secure password reset processAssignedZaldy Conrad Tungcap01/07/2026

Actions
Task #94446: Verify secure integration channelsAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94447: Ensure that form elements include clearly associated labelsInsufficient InformationZaldy Conrad Tungcap01/07/2026

Actions
Task #94448: Verify API rate limitingAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94449: Verify backup schedulingAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94450: Verify automatic logout on shared terminalsAssignedIlango Chandrasekaran01/07/2026

Actions
Task #94451: Verify secure mobile accessInsufficient InformationZaldy Conrad Tungcap01/07/2026

Actions

Related issues 2 (2 open — 0 closed)

Related to HUMS Hospital - Gaps #94313: CLINICARE > PDPA RESTRICTIONAssignedMehdi Mehdi24/06/2026

Actions
Related to HUMS Hospital - Gaps #93910: Master > PMS Master > StaffMaster. Unauthorized Access to Inactivate Employee Account via Direct URL in PMS Master ModuleQAMangesh Pangrekar04/06/2026

Actions
Actions

Also available in: Atom PDF