TimeControl Online Security Architecture white paper updated to version 7

tconlinesecurity_wpcover300x387Now that TimeControl Online has migrated up to version 7, we have rewritten our TimeControl Online Security Architecture white paper which is now available on the TimeControl.com website.  The paper responds only to the security of the TimeControl Online in-the-cloud subscription service.

Like the TimeControl On-Premise Security Architecture white paper, there were many changes.

The focus of the paper is to give prospective and existing TimeControl Online subscribers the information they require to be safe in their use of TimeControl Online and covers:

  • Physical security
  • Authentication
  • Functional security
  • Testing criteria
  • Other architectural security elements

Obviously we don’t share all aspects of the security structure as to do so would compromise the very security we’re trying to implement.

You can read the TimeControl Online Security Architecture white paper now at TimeControl.com.  For those more interested in the security architecture of TimeControl for an on-premise installation, we recommend looking at the TimeControl On-Premise Security Architecture white paper.

TimeControl Online makes the move to version 7!

Following the announcement in August that we had released TimeControl 7 for on-premise installations, we are thrilled to tell you that TimeControl Online has now been migrated to the version 7 architecture!

TimeControl Online is HMS Software’s Timesheet-as-a-Service in-the-cloud subscription service and includes everything that you’ve come to love about TimeControl.

Everything we’ve been talking about in the new version 7 architecture is here in TimeControl Online 7 as the code-base is the same for both on-premise installations and the online service.  So TimeControl Online users are now starting to enjoy the many new and enhanced features of TimeControl 7 including:

Multi-line edit timesheettimesheet.jpg

The TimeControl 7 timesheet has been completely rewritten to allow all cells in the timesheet to be edited simultaneously. For those with timesheets that have a large number of pre-loaded tasks, this will be a welcome change.

Gantt ViewsMyAccount_Gantt2.jpg

TimeControl 7 now allows you to view projects, tasks or assignments in graphical Gantt charge views. The view is highly configurable and is accessed from either the Reporting tab or the MyAssignments tab of each user’s Options page.

Calendar Views

TimeControl 7 introduces a brand new view into assignments with a calendar view. The view can include assignments and/or calendar_viewTimeRequests™ and can be accessed from either the reporting view or from right inside the TimeRequest Approval screen.


There’s lots and lots more!

There are more than 40 more exciting new and improved features in TimeControl 7 that we haven’t even listed here.

But, those using TimeControl Online didn’t have do the upgrade or worry about being on the latest version because that’s all part of the service when you subscribe to TimeControl Online.

For a more complete list, see the Latest in TimeControl page on the website.


TimeControl on-premise security architecture white paper rewrite

tc7secure_cover_300x389.jpgWith the launch of TimeControl 7, we are gradually working through updating the vast array of TimeControl resource that are available online.  This week saw a rewrite of the TimeControl On-Premise Security Architecture white paper which is now available on the TimeControl.com website.  Rewriting such material gets everyone thinking about the subject matter so security turns out to be one of our most popular internal conversations this week.

To be fair, security has been a topic of conversation for the TimeControl developers since long before the first version of TimeControl was released.  The first ever timesheet that HMS created was 10 years before TimeControl.  Our client, Philips Information Systems in Canada needed a timesheet that would integrate with both the Payroll system and the Project Scheduling system.  Security was a huge element of the design as the data for Payroll was, of course, very sensitive and the costing information in the project system was information that would have been terribly damaging to the company if it fell into the hands of competitors.

That original HMS timesheet was very secure for its time and there are elements of that design that live in TimeControl still.  But times have changed and the threat of data and systems compromise has become ever more sophisticated each year since that first timesheet system.

While the TimeControl On-Premise Security Architecture reveals many of the elements of the TimeControl deign that lend themselves to a safe and secure system, it is primarily a document that lets prospective clients review TimeControl against their own security standards.   Yes, we use the latest in many technology designers in TimeControl and we test against the OWASP standards (owasp.org) looking for potential threats and ensuring we protect against them but there are risks that you can implement at that are beyond the security architecture we designed for TimeControl.  Here are a couple of basic tips you can think about regardless of your size:

  1. Have a security plan for your key systems and data and choose someone to be accountable for it.
  2. Authentication is key.  How do people authenticate to your network, to your applications and even to your building.
  3. Outward facing or inward?  Does TimeControl need to be accessible to the Internet or will it serve your purposes just as well being available only within the corporate firewall?  Inward implementations aren’t as easily accessible and that can mean they’re safer.
  4. Don’t forget physical security.  If someone can get physical access to the servers, they can get access to your systems.
  5. Monitor.  Make sure you take advantage of the many technologies available to monitor unauthorized access or out of pattern use of your applications, your data and your network.
  6. Functional and Data restrictions.  In TimeControl, User Profiles determine what users can see which data and which users can use or perform which functions.  Think about who needs access and don’t be scared to start with less access and later ease up on your restrictions.
  7. Disaster Recovery.  Make a plan for your data and systems being compromised and how you’ll recover from it.  Then do an actual practice to make sure your plan works.  Iterative and redundant backups and a plan for restoring them is something that makes security officers sleep better.

This is not a comprehensive list of course.  There are many aspects to a complete security plan that are better explained by specialists in that field.  We’ve been talking about TimeControl for an On-Premise implementation.  Next month as we upgrade TimeControl Online to version 7 we’ll be updating our Security Architecture white paper for TC Online and we’ll be sure to talk about that here in the blog.

You can find the TimeControl 7 On-Premise Security White paper at: TimeControl.com/resources/whitepapers

TimeControl 7 introduces the multi-line timesheet… again!

Years ago with the release of TimeControl 6, we moved from a Windows-based ActiveX timesheet to a multi-device, multi-browser version.  It was an essential move.  The world is no longer all PC/Internet Explorer-based.  So TimeControl 6 was a complete rewrite of much of TimeControl.  But in making the TimeControl timesheet work on tablets, SmartPhones and browsers like Chrome, Safari and Firefox meant a change.  multi-line-timesheet.jpgIn order to be able to evaluate the content of each timesheet cell and do all the validations that TimeControl is known and selected for, we had to move to a one-line-at-a-time edit.  For new users, this was just fine but some users of the Windows-based interface felt that editing each line at a time was slower than they were used to.

In TimeControl 7, technology caught up to us in a way that we can bring back something old that’s new again.  The technology built into the multi-device, multi-browser TimeControl timesheet now allows us to be both performant and functional and to allow all lines to be edited at once.  For users who enjoy the efficiency of pre-loading, this will be a welcome change.  Each timesheet with multiple lines has all lines editable at the same time.  Users can just click on any cell and they are instantly editing that cell.  Just like TimeControl has always done, when the focus of editing moves off of a cell, TimeControl evaluates that line and warns the user if there are any issues with that cell or conditions other data on the timesheet as required.  So cascading user defined fields and resource filters are all in place just as they always have been.

calendar_config_444x572Multi-line edit isn’t the only change in the timesheet.  The new Options screen allows a number of new selections.  For example, users can now decide if they wish to word-wrap header rows.  This allows dates and the day of the week to be displayed on two lines but also allows the field to be narrow.  Each column can also be defined to be word-wrapped.  If you have longer project descriptions or charge descriptions, just click on wrapping that column.  You can also define which fields on the left of the screen will be frozen in place in case you scroll to the right.  This is particularly important if you have defined longer timesheet periods.  If you have monthly periods for example, you’ll certainly want to freeze the project/charge descriptions on the left to be able to fill in columns far to the right!

All the other timesheet functions are still there but many have been enhanced.  Attachments can still be made at the timesheet level or the expense line item level so if you have receipts to photograph or scan, they can be attached here.  There is a new Views tab that will be of more interest to administrative users who have to check timesheets with a large number of lines.  The Views function works much like the Drill Down Analyzer, allowing the user to drag and drop timesheet columns to see data summarized and grouped by each field selected.

We think you’ll like the new multi-line timesheet.  It will form the core of this wave of TimeControl for the foreseeable future.

HMS in Minneapolis / St Paul this week

minneapolisHMS is in Minneapolis/St-Paul this week where we are the gold sponsors of the Minnesota PMI’s Professional Development Days event.  HMS Software’s President, Chris Vandersluis will be speaking on two topics and HMS will have a booth to show off the latest version of TimeControl.  The Symposium part of the week is Thursday September 15th and we’ll be auctioning off a big screen TV to one lucky attendee.  Stop by the booth and speak to us about TimeControl 7 and how it might help solve your timesheet challenges.

If you’re going to the Professional Development Days, please make a point of saying hello.

To find out more about the Minneapolis PMI’s Professional Development days, go to: www.pmi-mn.org.

To find out more about TimeControl 7, visit: www.timecontrol.com/features/latest.

The new Calendar View in TimeControl 7

TimeControl 7 sports a fancy new interactive feature called the Calendar View.  It is one of the features that is generating the most excitement for certain TimeControl users. Calendar_view.jpg

When we first designed the Calendar View we expected that it would be popular among users who wanted a graphical representation of their upcoming vacations and holidays as well as any assigned tasks.  We thought of it primarily as a personal view.

But, once we’d created the new view and started using it, the advantages of the view for Supervisors and Administrators overshadowed our original expectations.

Supervisors who have to approve future vacation have been able to do so for some time with TimeControl’s TimeRequest™ functionality. Users can request time off, the supervisors can accept or reject the request and administrators can even push holiday time for banked holidays to any selection or to all users.  So far that all sounds fine and TimeControl supervisor users have reported how happy they are with the function since it was first released years ago.

Now with the introduction of the Calendar View we are seeing a missing link in the approval process that we didn’t think about in the past.

The Calendar View allows a supervisor to visualize all the TimeRequests from their team simultaneously.  They can color code the view to show approved vacations, pending requests and even rejected requests on the same page.  Now, at a glance, a supervisor can determine if the new request for time off will conflict with other requests.  They can see the impact on how many team members might be absent at the same time and making the right decision about whether to accept or cancel the new request for time off is so much easier.

In some organizations it is key to also see if accepting time-off requests will conflict with tasks that are scheduled so the supervisor can also display tasks assigned to each of their team members at the same time.calendar_config_444x572

The View is flexible with numerous options for the display as you can see here.  The Calendar View is accessed from the reporting menu or directly from inside the TimeRequest screen.

The availability of the new Calendar View will make the process of time-off approvals much more effective and gives all users a new way to visualize their own personal TimeControl data.

For more information about what else is new with TimeControl, visit www.timecontrol.com/features/latest.

TimeControl 7 now available!

We are so excited to announce that we have released an exciting new version of TimeControl. TimeControl version 7 is a major upgrade to the product we launched the first version of over 20 years ago and we are sure it will be welcomed by both existing and new customers.  There are over 40 major new features or enhanced features that you’ll be seeing as the new version is released.  Here are only a few:

Multi-line edit timesheettimesheet.jpg

The TimeControl 7 timesheet has been completely rewritten to allow all cells in the timesheet to be edited simultaneously.  In previous versions, a single line had to be edited at a time due to the many customizable validations that are tracked on each cell and each line.  We have determined methods to accomplish the same thing while allowing all the lines to be changed at once.  For those with timesheets that have a large numer of pre-loaded tasks, this will be a welcome change.

Gantt Views

TimeControl 7 now allows you to view projects, tasks or assignments in graphical Gantt charge views.  MyAccount_Gantt2.jpgThis gives users an easier perspective into data they have access to and to highlight potential assignment challenges in the coming days.  The view is highly configurable and is accessed from either the Reporting tab or the MyAssignments tab of each user’s Options page.

Calendar Views

TimeControl 7 introduces a brand new view into assignments with a calendar view.  The view can include assignments and/or TimeRequests™ and can be access from either the reporting view or from right inside the TimeRequest Approval screen. Now a supervisor with multiple requests for vacations in a given period can quickly pop up a calendar to see them graphically displayed and can distinguish between draft, released for approval, approved and rejected requests by using different colors for each type.

There are more than 40 more exciting new and improved features in TimeControl 7 that we haven’t even listed here.  For a more complete list, see the Latest TimeControl page on the website.

TimeControl 7 is available for download right now for clients who have an active support agreement at TimeControl.com/support/updates.  If you are an existing TimeControl client and need to renew your support agreement, please email info@hms.ca.


If only…

comingsoon.pngIf only the TimeControl timesheet had multi-line edit…

If only TimeControl had a calendar view to see pending time off…

If only TimeControl had a barchart view to see assignments…

If only the TimeControl report designer was multi-device enabled…

If only there were table-level validation rules in TimeControl…

If only…

If only” sometimes never arrives… but this time “If only” will be here next week!

Stay tuned.  TimeControl 7 is will launch next week!

Timesheets by exception

autofill1.pngNot every organization expects all their staff to fill in a timesheet every single week.  Instead, theses salaried staff are instructed to fill in a timesheet only “by exception” meaning only if they were not at their intended post for the entire pay period.  If the employee has an exception such as a sick day, vacation, a day when they left early, etc.  they must then enter only the exception.

TimeControl can be used like this of course because if that is what your payroll system expects, then TimeControl export to the payroll system will have only the expected exceptions.

Ah, but if life were only that easy.

Here’s a much more difficult scenario:  Imagine an organization where some of the staff who are project oriented must fill out timesheets to account for their entire week and other non-project personnel will be asked to only fill in timesheets by exception.  Must there then be two separate timesheet systems?

Not at all.

TimeControl’s AutoFill functionality is designed to fill in where the exception timesheet leaves off.  Here’s how it works.

First, define who will be entering timesheets by exception.

Next, create a process that allows people who have exceptions to enter them by a certain time in the timesheet period.  For example on a weekly timesheet perhaps exceptions must be entered by noon on Monday.

Now run the AutoFill functionality and have it “fill-up” the timesheets for the people defined to the total number of hours per day that you define.

In this manner TimeControl will create blank timesheets and automaticall fill them in or add to the exceptions that are already there to fill in a complete timesheet.  Now the project staff who enter a complete task-based timesheet every week and the non-project staff who enter a timesheet only by exception will end up with a completed timesheet that can be reported on together, exported or analyzed together and, if you still need to send only the exceptions to the payroll system, that too can be filtered to send only the appropriate data.

TimeControl’s AutoFill is one of the more popular features for HR and Payroll adminstrators for the enormous time it saves by automating a simple function and allowing a single timesheet to replace multiple timesheets.

You can see more HR related functions in the TimeControl and HR use-case area of the TimeControl.com website.

FAQ: TimeControl Reporting options

Question: What kind of reporting is available from TimeControl?

Answer: You have several options for TimeControl reporting thanks, in part, to its long legacy.  Let’s take the options in order of preference.

Report Interface

The first and most popular reporting tool in the system is the TimeControl Report Interface.  This What You See Is What You Get (WYSIWYG) report tool allows you edit existing example reports supplied with TimeControlUnposted Project_Employee Hours_300x294 or create your own reports from scratch.  It includes numerous abilities including being able to mix charts and table views, customizing fonts, logos, headers and footers, adding calculated fields and being able to sort, group, sub-group, total and, sub-total the data and even a dynamic pivot table view.

Once a report is created, it can be secured so that the report format is only visible to those who have permission for it.  Inside the report, TimeControl security is still in place down to the field level.  Even if a user has been given access to a report format that has a field in the format that the end user is not supposed to see, that field will become blank thanks to TimeControl Security.

At runtime, the data for the report can be selected according to available filters including TimeControl Dynamic Filters which ask for input at runtime.  For example, you might want to impost a date range for the report and you can do that by creating a Dynamic Filter that allows the user to enter the start and end date of the range at the time the report is executed.

The report interface is built in TimeControl’s multi-device, multi-browser architecture so it can be run from your PC in almost any browser, on your tablet or on your phone.  Once your report is on the screen, you can elect to print it or save it in one of numerous formats including PDF, Excel, CSV, Word, JPG and more.

Whew!  That should be enough, isn’t it?  Well it is of course, but you have other options as well.

The Drill Down Analyzer

This module is popular with Administrators because it allows tremendous flexibility in making data queries.  DDA_3_300x233Using the Drill Down Analyzer presents a selected amount of data which can be a small selection or a massive selection into a simple list. But, just like an Excel Pivot table, you can then drag a column header to the top of the screen and the data instantly reorganizes into sub-groups and sub-totals by that column.  Drag another column and another level of sub-grouping and sub-totaling appears.  It has to be seen to be fully appreciated (which you can do on the TimeControl.com Online Lessons page).

Using the Drill-Down Analyzer, you can answer a question like “how many hours did we spend on unbillable meetings last month) in seconds.

Once you have a view of the data you like, you can immediately save the data in PDF, Word, JPG or other formats or save it directly into Excel to do further analysis or reporting from there.

The Legacy Report Writer

tc_legacy_reportFor users of TimeControl prior to version 6, they will be familiar with the spreadsheet-like reporting tool based on a FormulaOne component that was automatically installed by TimeControl.  Using this ActiveX control, you can organize your selection of TimeControl data into groupings, sub-totals and totals and then either print it directly or save the result into Excel for further reporting.  The Legacy  Report Writer is not viewed by default in new TimeControl systems.  It is visible in the Legacy menu area as it will be most attractive for clients who have created many reporting views in that report writer and wish to keep using them while they create new reports in the TimeControl Report Interface.

TimeControl Links

TimeControl’s Link menu includes a Table Export function which allows exporting TimeControl data with a virtually unlimited selection into numerous formats including Excel and XML.  When data is exported into XML, you can optionally attach an XML Stylesheet which can condition the view of the data to include an incredible variety of effects to make your own reporting view that is saved right into your browser in XML and from where it can be printed.

Whichever your preference TimeControl’s remarkable flexibility in reporting has you covered.

You can find out more about TimeControl reporting at TimeControl.com.

The official blogsite of TimeControl