From bdb4bceb5765873922c6eb68fc9805f01531e5b3 Mon Sep 17 00:00:00 2001
From: Pete Herlihy <peter.herlihy@digital.cabinet-office.gov.uk>
Date: Thu, 26 Sep 2019 15:42:08 +0100
Subject: [PATCH] Adding statement about compliance with NCSC Cloud Security
 Principles

---
 app/templates/views/security.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/templates/views/security.html b/app/templates/views/security.html
index 55cc98fd5..5b4781c10 100644
--- a/app/templates/views/security.html
+++ b/app/templates/views/security.html
@@ -34,6 +34,7 @@
   <h2 class="heading-medium">Technical security</h2>
   <p>Other technical security controls on Notify include:</p>
   <ul class="list list-bullet">
+    <li>compliance with National Cyber Security Centre (NCSC) Cloud Security Principles</li>
     <li>protective monitoring to record activity, and raise alerts about any suspicious activity</li>
     <li>using JSON Web Tokens, to avoid sending API keys when your service talks to Notify</li>
   </ul>
@@ -53,7 +54,7 @@
   <p>If signing in with a text message is a problem for your team, <a href="https://www.notifications.service.gov.uk/">contact us</a> to find out about using an email link instead.</p>
 
   <h2 class="heading-medium">Information risk management</h2>
-  <p>Our approach to information risk management follows National Cyber Security Centre (NCSC) guidance. It assesses:</p>
+  <p>Our approach to information risk management follows NCSC guidance. It assesses:</p>
   <ul class="list list-bullet">
     <li>how Notify is built</li>
     <li>the infrastructure Notify is built upon</li>