Security & User Access

Sentinel is operated from a SAS-70 Level 2 data center.  SSL certificates are a client’s option, and messages are encrypted. Sentinel is configured to comply with the business’s internet, login and password protocols.

Sentinel is Role-driven for all functions with read-only and write access. All processes are “owned” by a user who can “extend” or “limit” access to the process or certain of its components.  If a user has “no access” for specific functions, those functions are not displayed in the user’s function menus.

In all data views, including filters and reports, the data is filtered and displayed according to the user’s access permissions.  For example, a user may have Report “write” permission.  Within any report wizard the user can only select data components to which the user would otherwise have access permission.

Sentinel also provides organization selection and passwords for certain data and functions regardless of the user’s overall role permissions.

Only authorized users may enter, edit or delete data.  For certain data, e.g. archived processes, only a Sentinel Administrator is authorized to re-activate the process or data component.

Sentinel has optional electronic signature with date stamp and optional password for certain components and attributes, e.g. a control activity or test status change.

To ensure the on-going integrity of data, Sentinel maintains Change Logs for many components, which provide a comprehensive audit trail of access, time and from/to data changes.

Sentinel’s extensive security controls, along with certain user-defined parameters, ensure the on-going integrity of all data.  As a result, external auditors for several Alinion customers have accepted Sentinel as a first-source for audit verification, greatly reducing the cost of audit preparation.