15.4

Dragon Client Installation Guide
Security considerations
When your organization implements Dragon, it is critical to install the software and its system
components using secure installation methods to protect the integrity and confidentiality of your data. It
is equally important to manage and monitor your system once installed to ensure that your data is
protected from unauthorized access and misuse.
The following sections provide secure installation and configuration guidelines, and describe the
security features provided in Dragon and in Nuance Management Center (if you have Nuance
Management Center/NMS mode enabled) to help you manage and monitor your system.
General security principles
All products
l
Keep software up-to-date.
Keep all software versions current by installing the latest patches for all components, such as
Microsoft® Windows Server, including all critical security updates.
l
Promote policy awareness.
Ensure your employees are aware of Acceptable Use policies, best practices, and standard
operating procedures that are relevant to Dragon.
Nuance Management Center product
If you are using a Dragon edition where Nuance Management Center/NMS mode is enabled:
l
Create password requirements.
Create a password policy to establish password requirements. For example, require a
minimum password length, such as 15 characters.
l
Keep passwords secure.
When you initially create user accounts in Nuance Management Center, send users their
username and initial password in separate email messages. Instruct your users not to share or
write down passwords, or store passwords in files on their computers. In addition, require users
to change their default passwords upon first use, and on a regular basis.
For more information, see the Users must change their password after first login
Organization option and the Maximum password age - password will expire in n days
Organization option in the NMC Help.
l
Implement the principle of Least Privilege.
In implementing the principle of Least Privilege, you grant users the least amount of
permissions needed to perform their jobs. You should also review user permissions regularly to
determine their relevance to users’ current job responsibilities.
l
Monitor system activity.
Review user audit records regularly to determine which user activities constitute normal use,
and which may indicate unauthorized use or misuse.
l
Establish best practices for downloading report data.
Nuance Management Center provides the option to save report data to a CSV file. Establish
best practices for downloading data to ensure the data remains secure outside of the product.
15