Topics tagged security

Topic	Replies	Views	Activity
Logging Details General security , data	1	170	7 July 2022
What processes do you have to handle configuration and secrets management to ensure the integrity of Alloy through development, testing and deployment? General security	1	74	10 August 2023
How do you monitor external software or 3rd party libraries security advisories and apply any security fixes promptly? General security	1	70	10 August 2023
How do you manage risk of internal and third-party software libraries used in code? General security	1	98	10 August 2023
What logging/auditing is available? General security , data , permissions	1	210	30 July 2021
What is Yotta's approach to remediating vulnerabilities? General security	1	126	11 April 2022
Do you have SIEM (Security Information & Event Management) integration? General security	1	129	30 July 2021
Does audit data such as verbose logs contain any sensitive information? Infrastructure data , security	1	141	30 July 2021
Can the log files of your solution/system be exported? Infrastructure security	1	129	30 July 2021
What audit information can be extracted in relation to login attempts? Reports security , authentication	1	133	30 July 2021
Do you communicate security issues/incidents with subcontracted services to customers? General security	1	124	30 July 2021
Do you have a process for actual or suspected cyber security incidents or breaches being reported to the customer? Infrastructure security	1	83	30 July 2021
What additional security testing have you completed? General security	1	116	30 July 2021
If you use AWS, do you use Amazon GuardDuty Threat Detection? Infrastructure security	1	105	30 July 2021
If you use AWS, do you use Amazon Shield? Infrastructure security	1	92	30 July 2021
How is the data protected in transit? Infrastructure data , security	1	133	30 July 2021
Have you implemented DKIM, DMARC and SPF on your email service? Infrastructure security , email	1	135	30 July 2021
Where is Alloy Data Stored? Infrastructure security , data	1	189	30 July 2021
Will remote access be required? Infrastructure data , security	1	168	30 July 2021
Which Certification Authority do you use? Infrastructure security	1	130	30 July 2021
Does the solution use Client Certificates for authentication or S/MIME? Infrastructure security	1	116	30 July 2021
Does the solution use Client Certificates for signing to provide non-repudiation? Infrastructure security	1	115	30 July 2021
Are Self Signed Digital Certificates used? Infrastructure data , security	1	147	30 July 2021
Is there a lockout process for user accounts? General authentication , user , security	1	146	30 July 2021
Does the solution use Role Based permissions/authorisation? General authentication , user , security	1	154	30 July 2021
How is the communication between the Client/Mobile and the Service encrypted? Infrastructure security	1	129	30 July 2021
What additional controls are in place to support the unauthorised access of data? General data , security	1	122	30 July 2021
Are users shown that a failed login was a username or password that was incorrect? General authentication , user , security	1	121	30 July 2021
Is the password policy configurable? General authentication , user , security	1	142	30 July 2021
OWASP suggests methods of storing passwords, do you follow this methodology? General authentication , user , security	1	143	30 July 2021