Main website
Government Drupal Developers NetworkCommunity
All working groups

Working group

Security & Compliance

Hardening, patching, security advisories and the compliance paperwork that comes with running Drupal in government.

5 members · 2 discussions · 5 replies · led by Ben Carter

Log in to join

About this group

A space for the people who get paged when a security advisory drops.

  • We triage Drupal security advisories on release day and share mitigation notes
  • We keep a living hardening checklist (see the pinned discussion)
  • We compare notes on ITHC, Cyber Essentials Plus, FedRAMP and IRAP assessments

Never post anything above OFFICIAL, credentials, or details of unpatched vulnerabilities in your own estate.

Group discussions