DMS Login Password Protection

[cjmccpa]

We use DMS (Document Management System) software for our document management, it of course has clients tax returns and supporting documentation, which includes SSN's, EIN's, addresses, etc...

Why does this program not have a login similar to Lacerte?

The Gramm-Leach-Bliley Act (GLBA) is a U.S. law that requires financial institutions to protect customer data. Under the GLBA, tax and accounting professionals are considered financial institutions, regardless of size.

So how is it that DMS, which I'm sure many other accounting firms use, is not GLBA compliant, and for that matter IRS compliant when it comes to protecting taxpayer data?

This really is a huge problem with the program.  Do we have other safeguards in place, of course we do, that does not detract from the fact that the program should have a password protected login.

[Anonymous]

Thanks for the idea to have a log in similar to Lacerte for DMS. We are changing the status to "Open for voting".

Continue to vote and comment on enhancements by going to the Idea Exchange Home page and select "Status": Open for voting, "Sort by": Most Popular. > Lacerte Idea Exchange

If you have any questions on the life cycle of an idea, check out our Idea Exchange Getting Started Guide for more information.

[ellenlsk]

I completely agree with cjmccpa's comments above.  Our DMS files contain even more sensitive information than the Lacerte program itself, so not having a password protected login on DMS similar to Lacerte is concerning.  With all the identity theft going on in the world today, it is imperative for our business to have as many safeguards in place as possible to protect our clients' data.

[SPTax]

I also agree with cjmccpa. It would be better to have a login for DMS similar to what we have for Proseries. Right now we can password protect each individual client folder with a different password or make one password that is applied to all of your client folders, but that becomes cumbersome and slow the more client folders you add. Logging into the program with two factor authentication would save time and effort during our busiest time. It would also be nice to be able to quickly lock the program when you have to step away from your desk for a quick minute.

[PA Moore]

Our Firm agrees.  In looking at our Data Security Plan we see DMS as an area of concern and would strongly advocate for access to this product to be controlled via password and multi factor authentication.

[THL]

Our Firm agrees as well.  This is a huge security hole and is wildly inconsistent with Lacerte's position of being security conscious.  It should be part of the same two factor authentication Single Sign On security with the rest of the Lacerte tax programs.  What is the point of putting passwords on Lacerte if someone can just open the DMS and get everything they need.  There is a much greater volume of sensitive information in the DMS than in a single version of Lacerte as you typically would have every return and all the source docs for every year accessible in the DMS.

[Michael41]

Dear Inuit,

 The DMS system needs a two-factor authentication in place. The DMS contains all the information an ID thief would need to create chaos. Other Lacerte and Intuit products require anyone to log in and use two factor authentication. Even to leave a comment here I had to login with two factor authenication. So, please add these features to the DMS.

Thank You

[khamlin]

We have come to the same conclusion.  This is a critical area with all the information hackers would need.  With all the safety precautions.  I find it hard to believe that Intuit has left such a  vuneable area open to scammers when a simple password would protect such sensitive information.