Info Security Q&A

This is not a complete list of information security details related to CFC systems -- e.g., OGD and Members Portal.

OGD and Members Portal

Are the OGD and CFC Global Members Portal secure?

There are several components of security both systems -- for example:

• Program

• Database

• Web browser

• Transmission of data

• User names and passwords

• Data back-up, the Internet

• The computers storing the data

• The computers / devices you use to access either system

• Every person accessing the systems

Every CFC member accessing the systems is part of and responsible for the overall security.

Many are concerned about the systems getting hacked. If systems of military agencies and multinational enterprises have been hacked in the past, it only shows that any system can be hacked.

Is it safe to put in personal information?

The CFC IT team responsible for the OGD and Members Portal is doing their best to secure our information.

We are all partly responsible for ensuring the safety of our information. Read the sections below.

The truth is, the risk is higher in

• social media like Facebook, Instagram, and Twitter, which may have

  • • your personal information

    • old and current pictures of yourself, your family, your relatives, your friends, everyone you know in that system

    • your whereabouts -- places you have been to

    • your likes and dislikes

    • your information posted by yourself and/or people you know.

• search engines like Google which may have

  • • a history of everything you have searched for

    • a pattern of the web sites you visit regularly

Who are able to enter / update personal information of CFC members?

Each member can update his/her personal information using the Members Portal. Here are the procedures.

Those who have access to the OGD can also update the records of members within their organization (e.g., chapter, cluster, or sector).

Who can access your information?

Your OGD record (which includes your personal information)

• Those who have access to OGD can see and update your OGD record with the access level provided -- e.g., members within a chapter.

• Your household head can view (but not update) your OGD record (e.g., personal information, service record, formation).

Using the Members Portal, you can

• View and update your personal information and Parish Service Record.

• View (but not update) the rest of your OGD record (e.g., service record, formation).

Tithes information are not in the OGD and Members Portal.

Web Browser

How safe is your web browser?

• There will always be safety and security concerns with web browsers.

• Always use updated versions of web browsers -- e.g., Edge, Google Chrome, Firefox.

• Always update your Windows -- especially install security / critical updates.

Are transactions to OGD secure?

• Web browser access to the systems is secure using HTTPS (Secure HTTP).

• For technical details, you can check the SSL Digital Certificate. As of May 2020, they use SHA256RSA signature algorithm.

Computer

How do you keep your computer safe?

• Always use a good and updated "anti-virus" program.

• We loosely use the term "anti-virus" to cover all anti-malware programs like: firewall, anti-virus, endpoint security software, and others.

• Even mobile devices (cellphones, tablets) need antivirus programs.

• Always update the operating system of your devices -- e.g., Windows, MacOS/iOS, Linux / Android (and other Linux flavors). At least install security / critical updates.

Privacy Laws

Does the OGD comply with Canada Privacy Laws?

As of June 2020, there is no official document that CFC members sign allowing the gathering and use of personal information. However, CFC has no intention of sharing your information to others. Your information is only for CFC use.

Some references to Canada Privacy Laws.

• Summary of privacy laws in Canada

• Personal Information Protection Act