Topics tagged security

Topic	Replies	Views	Activity
Logging Details General security , data	1	180	7 July 2022
What processes do you have to handle configuration and secrets management to ensure the integrity of Alloy through development, testing and deployment? General security	1	81	10 August 2023
How do you monitor external software or 3rd party libraries security advisories and apply any security fixes promptly? General security	1	80	10 August 2023
How do you manage risk of internal and third-party software libraries used in code? General security	1	108	10 August 2023
What logging/auditing is available? General security , data , permissions	1	224	30 July 2021
What is Yotta's approach to remediating vulnerabilities? General security	1	132	11 April 2022
Do you have SIEM (Security Information & Event Management) integration? General security	1	139	30 July 2021
Does audit data such as verbose logs contain any sensitive information? Infrastructure data , security	1	147	30 July 2021
Can the log files of your solution/system be exported? Infrastructure security	1	140	30 July 2021
What audit information can be extracted in relation to login attempts? Reports security , authentication	1	139	30 July 2021
Do you communicate security issues/incidents with subcontracted services to customers? General security	1	127	30 July 2021
Do you have a process for actual or suspected cyber security incidents or breaches being reported to the customer? Infrastructure security	1	86	30 July 2021
What additional security testing have you completed? General security	1	122	30 July 2021
If you use AWS, do you use Amazon GuardDuty Threat Detection? Infrastructure security	1	110	30 July 2021
If you use AWS, do you use Amazon Shield? Infrastructure security	1	96	30 July 2021
How is the data protected in transit? Infrastructure data , security	1	137	30 July 2021
Have you implemented DKIM, DMARC and SPF on your email service? Infrastructure security , email	1	138	30 July 2021
Where is Alloy Data Stored? Infrastructure security , data	1	203	30 July 2021
Will remote access be required? Infrastructure data , security	1	175	30 July 2021
Which Certification Authority do you use? Infrastructure security	1	135	30 July 2021
Does the solution use Client Certificates for authentication or S/MIME? Infrastructure security	1	119	30 July 2021
Does the solution use Client Certificates for signing to provide non-repudiation? Infrastructure security	1	118	30 July 2021
Are Self Signed Digital Certificates used? Infrastructure data , security	1	151	30 July 2021
Is there a lockout process for user accounts? General authentication , user , security	1	149	30 July 2021
Does the solution use Role Based permissions/authorisation? General authentication , user , security	1	162	30 July 2021
How is the communication between the Client/Mobile and the Service encrypted? Infrastructure security	1	132	30 July 2021
What additional controls are in place to support the unauthorised access of data? General data , security	1	125	30 July 2021
Are users shown that a failed login was a username or password that was incorrect? General authentication , user , security	1	121	30 July 2021
Is the password policy configurable? General authentication , user , security	1	148	30 July 2021
OWASP suggests methods of storing passwords, do you follow this methodology? General authentication , user , security	1	148	30 July 2021