Posts

Digital Services: Understanding your service

Before you can design a secure digital service it’s important to understand a…

Read more
/by

Design Principles: Introduction

Digital services provide us with quick, convenient access to a whole range of…

Read more
/by

Design Principles: Making compromise easy to detect

1. Ensure that all relevant security events and logs are collected for analysis. Having the…

Read more
/by

Design Principles: Making services hard to compromise

1. Validate or transform all external input before processing it. Simple data formats…

Read more
/by

Protecting Bulk Personal Data

15 good practice measures for the protection of bulk data held by digital…

Read more
/by

Design Principles: Reducing the impact of compromise

1.  Build your service using a segmented approach.  A system which requires multiple…

Read more
/by

Bulk Data: 4-7 Who has access to your data?

4. All users with access to your data are individually known and referenced….

Read more
/by

Vulnerability management

All modern software contains vulnerabilities; either software defects that require patches to remedy, or…

Read more
/by

End User Devices: Advice for End Users

This advice will need to be tailored to the particular device(s) being used,…

Read more
/by

End User Devices: Security Principles

The EUD Security Framework describes twelve principles for securing devices, all of which must be…

Read more
/by