From ac79ee98913dd203c395f6f15ecdf3816f61e4ab Mon Sep 17 00:00:00 2001
From: Pete Herlihy <peter.herlihy@digital.cabinet-office.gov.uk>
Date: Thu, 5 Oct 2017 13:02:27 +0100
Subject: [PATCH 1/2] Adding security features to the features page

---
 app/templates/views/features.html | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/app/templates/views/features.html b/app/templates/views/features.html
index 3a9b8cabb..8ee57dc28 100644
--- a/app/templates/views/features.html
+++ b/app/templates/views/features.html
@@ -77,4 +77,14 @@
         <li>Manage your team members’ permissions</li>
       </ul>
 
+    <h2 class="heading-medium">Notify security</h2>
+      <ul class="list list-bullet">
+        <li>Approved by the Cabinet Office Senior Information Risk Officer (SIRO)</li>
+        <li>Ongoing information risk management activities</li>
+        <li>Data is encrypted as it passes through the service and when it’s stored</li>
+        <li>Personal data is only held for the minimum period of time</li>
+        <li>Permissions model allowing different functionality to different team members</li>
+        <li>Using an advanced API key standard, JSON Web Tokens, providing a higher degree of protection for services</li>
+      </ul>
+
 {% endblock %}

From e8a2fbaea488d2641c96de6922a99abd26152ec0 Mon Sep 17 00:00:00 2001
From: Pete Herlihy <peter.herlihy@digital.cabinet-office.gov.uk>
Date: Thu, 5 Oct 2017 15:07:00 +0100
Subject: [PATCH 2/2] Added link to the info risk management page

---
 app/templates/views/features.html | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app/templates/views/features.html b/app/templates/views/features.html
index 8ee57dc28..c7667cea6 100644
--- a/app/templates/views/features.html
+++ b/app/templates/views/features.html
@@ -87,4 +87,7 @@
         <li>Using an advanced API key standard, JSON Web Tokens, providing a higher degree of protection for services</li>
       </ul>
 
+    <p>
+      See our <a href="{{ url_for('main.information_risk_management') }}">approach to information risk management</a> for more details.  
+    </p>
 {% endblock %}