darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-17 04:59:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

Adding statement about compliance with NCSC Cloud Security Principles

Browse Source
This commit is contained in:
Pete Herlihy
2019-09-26 15:42:08 +01:00
committed by GitHub
parent 2f09c812fe
commit bdb4bceb57
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/templates/views/security.html
View File

@@ -34,6 +34,7 @@
<h2 class="heading-medium">Technical security</h2>
<p>Other technical security controls on Notify include:</p>
<ul class="list list-bullet">
<li>compliance with National Cyber Security Centre (NCSC) Cloud Security Principles</li>
<li>protective monitoring to record activity, and raise alerts about any suspicious activity</li>
<li>using JSON Web Tokens, to avoid sending API keys when your service talks to Notify</li>
</ul>
@@ -53,7 +54,7 @@
<p>If signing in with a text message is a problem for your team, <a href="https://www.notifications.service.gov.uk/">contact us</a> to find out about using an email link instead.</p>
<h2 class="heading-medium">Information risk management</h2>
<p>Our approach to information risk management follows National Cyber Security Centre (NCSC) guidance. It assesses:</p>
<p>Our approach to information risk management follows NCSC guidance. It assesses:</p>
<ul class="list list-bullet">
<li>how Notify is built</li>
<li>the infrastructure Notify is built upon</li>