I am looking at a company that will host my agency management program. The guy gave me a ton of information so I asked him about their security.

He sent me a two page spec sheet with a ton of data. Naturally 99% or more of the info goes right over my head. So I decided to ask him a simple question. What makes this website more secure than NASA or other government computers that seemed to get hacked from time to time. Or banks for that matter. They seem to have their security breached every week.

So he got all indignant and huffy and told me how wonderfully secure their site is (both physically and via the net) and how vulnerable my office is. "I would need the 3th Army camped outside my office to be as secure as they are."

It made me laugh a little it. I told him I was not questioning his security measures. I said that one of my clients is a CPA and she keeps her files backup to Carbonite's website and some computer dude told me how wonderful they are and that their site is impossible to be hacked. I am a little suspect when I hear something like that.

According to Wiki Carbonite uses 128 bit blowfish encryption. This other company says their encryption is 2048 bit. Now I am rather computer dumb. I can not figure out why anyone would send their encryption through a fish or how they could get it reconfigured when it passes out the other end [grin1] but 2048 sounds better than 128. If 128 is nearly unhackable it also sounds extremely excessive as well.

Just looking for some input from those who know what the heck they are talking about.

---

What program? What language is it written in?

---

I have no idea. Does that make a difference?

---

Language, not really. But is this a program you are having developed or you're purchasing?

---

If we go this route we will have our agency data stored online at their website. They already have it set up for other insurance agencies.

---

Wait, what? You said you were gonna need your program hosted. Are you not talking about a software program, such as a web application or desktop application? Also, I gave you two options and you said if we go this route ... which route lol

---

well maybe I don't speak so good computer.

We have a management system in house at this time. We have had it for about 10 years. My brother is thinking we need to upgrade. While looking around I found a company that will give us access to their management system at their website. The nice thing about that is we are growing into 3 locations so all of us can tap in without using a file server and going to something like log-me-in. We can be sitting at a client's kitchen table or int heir board room and log into their file for additional data.

It is not a done deal. We may still opt to have the files here on site. There is something to be said for owning your management system instead of "renting" so to speak. If that happens none of this other stuff matters.

If we go with their program on their site I thought the proper term is that they are hosting it. Sorry for using the wrong vernacular.

So I guess you can think about it like a more sophisticated carbonite website that is tailored to service insurance agencies needs.

To come back to your question we are not having them develop it. They already did that. As far as purchasing it, in a way. But we can't take it anywhere like you can take your message board. If we don't like them we have to pack up our electronic files and find some place else to go.

The things they will supply are things like forms. All of the Acord application forms. Loss notice forms. Certificates of insurance and binders. There is a section for accounting. another for correspondence in written letters and emails. An area for us to put the list of loss payee and additional insureds names and addresses which will pull through to apps and other forms. Our companies will be able to download the policy information from their sites to ours. A calendar of course.

Did I make it a little more clear?

So any way I was just asking why one company can have a 128 bit encryption and that is said to be great ans someone else has 2048 bit.

---

128 should suffice just fine.

---

I'd ask him one question: Do people work for your company?

If his answer is yes, his security system is flawed. People will always be the weak link in computer security.