diff --git a/app/templates/views/information-security.html b/app/templates/views/information-security.html index ddca943a5..2075e8702 100644 --- a/app/templates/views/information-security.html +++ b/app/templates/views/information-security.html @@ -109,22 +109,18 @@ Information security guidelines – GOV.UK Notify

Don’t send requests for personal information of any kind, unless the request is directly connected with a transaction

-

To reduce the risk from phishing attacks, don’t send requests for personal information of any kind, unless the request is directly connected with a transaction.

+

To reduce the risk from phishing attacks, don’t send requests for personal information of any kind, unless the request is directly connected with a transaction.

-

It’s OK to send a request for personal information if it’s directly connected with a transaction. Here are 2 examples of where it would be OK:

+

It’s OK to send a request for personal information if it’s directly connected with a transaction. For example it's OK to send a notification with a link asking users to reset their password if they've requested it by clicking on a 'Forgot your password?' link.

- -

The same 2 rules above apply to links:

+

The same rules apply to links:

There are additional rules that apply specifically to links.

@@ -146,7 +142,7 @@ Information security guidelines – GOV.UK Notify

Include the user’s name – it makes phishing more difficult

-

Start your message by addressing the user. For example, Hi Alice Smith or Dear Bob Jones. Including this extra piece of information makes phishing more difficult.

+

Start your message by addressing the user. For example, 'Hi Alice Smith', or 'Dear Bob Jones'. Including this extra piece of information makes phishing more difficult.

Use technical approaches to improve privacy and prevent phishing

@@ -160,7 +156,7 @@ Information security guidelines – GOV.UK Notify

Examples

-

Example of an appointment reminder

+

Example of an appointment reminder

“Dear Anne Smith, you’ve got a licence appointment tomorrow at 2:15pm at the Licence Office, 1 Chapel Hill, Heswall, Bournemouth BH1 1AA. To cancel your appointment, visit licensing.service.gov.uk/appointment/12345678/cancel. To change your appointment time, sign in to your account.”

This is a good example because:

-

Example to add a photo to an environmental permit

+

Example to add a photo to an environmental permit

“Dear Andrew Jones, to add a location photo to your environmental permit application, visit environmentalpermit.service.gov.uk/12345678/add-photo. If you didn’t request this link, please ignore this message.”

This is a good example because: