Topics tagged security

Topic	Replies	Views	Activity
What processes do you have to handle configuration and secrets management to ensure the integrity of Alloy through development, testing and deployment? General security	1	46	10 August 2023
How do you monitor external software or 3rd party libraries security advisories and apply any security fixes promptly? General security	1	50	10 August 2023
How do you manage risk of internal and third-party software libraries used in code? General security	1	59	10 August 2023
What logging/auditing is available? General security , data , permissions	1	156	30 July 2021
Logging Details General security , data	1	113	7 July 2022
What is Yotta's approach to remediating vulnerabilities? General security	1	108	11 April 2022
Do you have SIEM (Security Information & Event Management) integration? General security	1	108	30 July 2021
Does audit data such as verbose logs contain any sensitive information? Infrastructure data , security	1	96	30 July 2021
Can the log files of your solution/system be exported? Infrastructure security	1	102	30 July 2021
What audit information can be extracted in relation to login attempts? Reports security , authentication	1	111	30 July 2021
Do you communicate security issues/incidents with subcontracted services to customers? General security	1	88	30 July 2021
Do you have a process for actual or suspected cyber security incidents or breaches being reported to the customer? Infrastructure security	1	68	30 July 2021
What additional security testing have you completed? General security	1	95	30 July 2021
If you use AWS, do you use Amazon GuardDuty Threat Detection? Infrastructure security	1	91	30 July 2021
If you use AWS, do you use Amazon Shield? Infrastructure security	1	74	30 July 2021
How is the data protected in transit? Infrastructure data , security	1	89	30 July 2021
Have you implemented DKIM, DMARC and SPF on your email service? Infrastructure security , email	1	106	30 July 2021
Where is Alloy Data Stored? Infrastructure security , data	1	114	30 July 2021
Will remote access be required? Infrastructure data , security	1	92	30 July 2021
Which Certification Authority do you use? Infrastructure security	1	98	30 July 2021
Does the solution use Client Certificates for authentication or S/MIME? Infrastructure security	1	93	30 July 2021
Does the solution use Client Certificates for signing to provide non-repudiation? Infrastructure security	1	74	30 July 2021
Are Self Signed Digital Certificates used? Infrastructure data , security	1	106	30 July 2021
Is there a lockout process for user accounts? General authentication , user , security	1	87	30 July 2021
Does the solution use Role Based permissions/authorisation? General authentication , user , security	1	97	30 July 2021
How is the communication between the Client/Mobile and the Service encrypted? Infrastructure security	1	109	30 July 2021
What additional controls are in place to support the unauthorised access of data? General data , security	1	88	30 July 2021
Are users shown that a failed login was a username or password that was incorrect? General authentication , user , security	1	77	30 July 2021
Is the password policy configurable? General authentication , user , security	1	83	30 July 2021
OWASP suggests methods of storing passwords, do you follow this methodology? General authentication , user , security	1	91	30 July 2021