Hello, I am trying to find more information on the physical security of a DNN installation.  I am building a demo website for our technical services department for a commercial lines insurance company.  The primary goal was a centralized resource of information for our staff (it is currently spread over several websites, printed manuals, and individual collections).  Because of the options and flexibility that DNN offers, I am also looking into the feasibility of using it as a secure content management system for storing and updating risk assessment files to replace the existing method that involves a VPN and accessing a shared network folder filled with all of the different files.  No CMS program is currently in use for this aspect of our operations.  As part this project I will also be looking for someone who has experience building a database in DNN that would be capable of compiling our assessment information, and then can display the data in user defined forms as well as being able to merge and print the information into a template for various printed forms.

While searching the forum I did see one post in regards to a 3rd party threat assessment, however it indicated that the information was not publicly available at the time of the posting.

Because the company also handles workman's compensation insurance, it will need to meet data security requirements under HIPPA.

Does anyone have any information on the security of DNN that I could use?