Topics tagged security

Topic	Replies	Views	Activity
Logging Details General security , data	1	187	7 July 2022
What processes do you have to handle configuration and secrets management to ensure the integrity of Alloy through development, testing and deployment? General security	1	90	10 August 2023
How do you monitor external software or 3rd party libraries security advisories and apply any security fixes promptly? General security	1	86	10 August 2023
How do you manage risk of internal and third-party software libraries used in code? General security	1	116	10 August 2023
What logging/auditing is available? General security , data , permissions	1	237	30 July 2021
What is Yotta's approach to remediating vulnerabilities? General security	1	138	11 April 2022
Do you have SIEM (Security Information & Event Management) integration? General security	1	144	30 July 2021
Does audit data such as verbose logs contain any sensitive information? Infrastructure data , security	1	153	30 July 2021
Can the log files of your solution/system be exported? Infrastructure security	1	145	30 July 2021
What audit information can be extracted in relation to login attempts? Reports security , authentication	1	147	30 July 2021
Do you communicate security issues/incidents with subcontracted services to customers? General security	1	134	30 July 2021
Do you have a process for actual or suspected cyber security incidents or breaches being reported to the customer? Infrastructure security	1	91	30 July 2021
What additional security testing have you completed? General security	1	125	30 July 2021
If you use AWS, do you use Amazon GuardDuty Threat Detection? Infrastructure security	1	110	30 July 2021
If you use AWS, do you use Amazon Shield? Infrastructure security	1	98	30 July 2021
How is the data protected in transit? Infrastructure data , security	1	145	30 July 2021
Have you implemented DKIM, DMARC and SPF on your email service? Infrastructure security , email	1	146	30 July 2021
Where is Alloy Data Stored? Infrastructure security , data	1	211	30 July 2021
Will remote access be required? Infrastructure data , security	1	181	30 July 2021
Which Certification Authority do you use? Infrastructure security	1	143	30 July 2021
Does the solution use Client Certificates for authentication or S/MIME? Infrastructure security	1	128	30 July 2021
Does the solution use Client Certificates for signing to provide non-repudiation? Infrastructure security	1	122	30 July 2021
Are Self Signed Digital Certificates used? Infrastructure data , security	1	157	30 July 2021
Is there a lockout process for user accounts? General authentication , user , security	1	159	30 July 2021
Does the solution use Role Based permissions/authorisation? General authentication , user , security	1	163	30 July 2021
How is the communication between the Client/Mobile and the Service encrypted? Infrastructure security	1	138	30 July 2021
What additional controls are in place to support the unauthorised access of data? General data , security	1	134	30 July 2021
Are users shown that a failed login was a username or password that was incorrect? General authentication , user , security	1	128	30 July 2021
Is the password policy configurable? General authentication , user , security	1	153	30 July 2021
OWASP suggests methods of storing passwords, do you follow this methodology? General authentication , user , security	1	152	30 July 2021