IHR - IHR's Server Security

While IHR cannot guarantee absolute server security, IHR does take measures to ensure that clients' websites and data are safe.

Website backups	nightly backup of all client sites on the server For websites which IHR updates, IHR saves copies of those sites to our local computer.
Access control	FTP and SSH access is allowed Telnet is not allowed (it is unsecure)
Secure Socket Layer (SSL)	IHR servers use SSL version 2.0 with all installed security patches If your website doesn't use SSL secure forms (i.e. "https://...."), then this will not apply to your website
Valuable data on server	IHR does not store valuable data (e.g. patient records or credit card numbers) on the IHR server
Passwords	Some clients are given FTP access to update their websites. These clients can only update their own sites. All IHR assigned passwords are seven or more characters with letters and numbers.
Form security	For IHR clients that have interactive forms (e.g. "request information" or "apply to become an egg donor") on their websites, IHR uses a common CGI script to process the form email. This script has been reviewed by security experts to ensure there are no security holes.