text: The complete security cycle begins with code creation through data loading, storage, and 
  access, and ends with data (and index) expiration. The following list outlines different types of 
  security that are described in this chapter. Within each type, different security techniques can 
  be implemented. 
  
  (cid:2) Code creation: 
  
  – Controlled environment 
  
  – Code scanning 
  
  – Quality assurance testing 
  
  (cid:2) Data separation: 
  
  – Multiple systems: Allowing users access only to the system that contains data that is 
  relevant to them 
  
  – Multiple object servers 
  
  – Multiple archive subsystems 
  
  – Application programming interface (API) access: Web server, web services, and 
  Content Management Interoperability Services (CMIS) 
  
  (cid:2) Data security: 
  
  – Administrative features: Login inactivity, disabling a user, locking out a user, and 
  defining password rules 
  
  – Content Manager OnDemand data model: Application groups (AGs) and folders 
  
  – Query restrictions 
  
  – Annotation security 
  
  – Securing access to Content Manager OnDemand commands (stash file) 
  
  (cid:2) Data encryption: 
  
  – Data at Rest 
  
  – Data in Motion: Secure communication between the server and the clients (Secure 
  Sockets Layer (SSL)) 
  
  (cid:2) Security exits: 