Skip to content

Conversation

@zeger-pon
Copy link
Collaborator

Added relevant changes based on the RiskMirror IT & Security ITLT

Added relevant changes based on the RiskMirror IT & Security ITLT

### Network

SSL is obligatory for all network connections. Cloudflare must be used unless an alternative is in place.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SSL or TLS?
Do we need to mention the minimum level?

- **Log transactions performed by (privileged) accounts**: Critical events must be logged.
- **Log changes to financial settings**: Ciritical financial events must be logged.
- **Log direct database access**: Direct access to databases must be logged.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to add something about traceability of application/transaction logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Review RiskMirror IT & Security ITLT - 2024 04

5 participants