IMQS have two distinct technology stacks. Up onto Version 6 of the production suite, all modules are a single Desktop application. From Version 6 onwards to the current version, Version 8, the technology stack changed to a web based solution. The web-based solution has to be deployed in a distributed, elastic infrastructure platform. The platform can either be on a client private intra-net or at an IaaS (Infrastructure as a Service) platform.Given that each client’s installation could be a combination of different services, delivery models and operational models - public, private and hybrid - the infrastructure platform security concern and solutions are context dependent. Hence, our solutions architecture matches these concerns and builds security controls into the application architecture.