This document details the security practices My CP & Me, L.L.C. employees to keep your data safe & secure from malicious or unauthorized use. For security reasons we may not elaborate on specifically how these measures are preformed and executed. This is for your safety as well as the overall safety and integrity of My CP & Me. While we do utilize a number of security measures to protect your data and privacy no service or system over the internet or wireless network can be 100% guaranteed safe and secure. It is for this reason that we encourage all visitors to report any issues to My CP & Me immediately. You can reach us by emailing support@mycpandme.org with your questions or concerns or call/text during regular business hours regarding our security practices. Our phone number for calls/texts is +1 (317) 824-9524 and our hours of operation are Everyday 10 a.m. – 4 p.m. EST Holiday hours may vary.
My CP & Me uses a number of security measures such as, without limitation to,
- Encryption though a Secure Socket Layer (SSL) protocol using a security certificate provided by Let’s Encrypt.
- A Web Application Firewall (WAF) used to identify and block malicious traffic to the Site
- Regular malware and virus scanner meant to block content that includes malicious code which could damage the integrity of the Site
- Protection on the Administrative Access end (i.e. the backend) by limiting the number of login attempts to the restricted area
- Backend default URL changes. To make it harder for an unauthorized individual to access the restricted administrator area
- Regular Password changes are enforced for administrators and others with access to the backend
- 2 factor authentication is required for all members with backend access.
- The number of login attempts to the backend area has been severely limited to prevent unauthorized brute force access
- Any unauthorized attempts to access the backend area can and will result in the individuals IP Address being blocked. This will prevent them from further attempting to access the sensitive area
- Individuals with access to the backend area are only granted the permissions needed specifically for their assigned task(s) and do not have access to anything not pertaining to their specific purview.
- Regular site backups are preformed with our hosting provider to protect against data corruption and/or loss
- We require all members to create a strong and secure password for accessing their accounts. For a strong password we recommend it be:
- a minimum of 12 characters
- Have at least 1 number
- Contain at least 1 capital and 1 lowercase letter
- Have a minimum of 1 symbol
13. We regularly update the extensions or programs on the site to protect against viruses and other vulnerabilities.
While we strive to make My CP & Me as secure and safe as possible for everyone. We cannot 100% guarantee the security and safety of the Site, but with these policies in place we are confident your data is safe and secure with us at all times. Please be aware for safety and security reasons My CP & Me reserves the right to refuse to elaborate on any specifics pertaining to Site Security except where required by law.
There are also some steps YOU as the end user can take to better protect against threats, some ideas are listed below:
- Create and maintain a strong and secure password that is unique and different from any other passwords you use on other websites
- Do NOT share your login details with anyone (even us) we do NOT have any knowledge of your password used to access the Site and we don’t want it. If someone contacts you claiming to be from the My CP & Me support team, and they say they require you to reveal your password this is not from My CP & Me and should be reported as fraud to us. We will never request your password for any reason.
- Do NOT download any files or attachments provided to you that you do not recognize either on My CP & Me or on a third party or any other website.
- Do NOT click on links provided to you by a third-party even when that party appears official (such as with your bank) keeping with that example we encourage you to instead type the URL of your bank into the address bar manually instead of using a link. Never use a link unless you can 100% verify the source
- Protect all of your devices with a password
- Use 2 factor authentication method wherever available. Currently, My CP & Me does not support 2 factor authentication for members but we have plans to implement this soon.
- Regularly update your devices OS. Software updates often include security fixes and improvements it’s recommended that you regularly check your devices OS for updates and install them whenever one is available
- Install (and regularly update) anti-virus software for all your devices from a well known and reputable anti-virus/security company