Security Website

Explain the measures and scope of protection using verifiable information.

7 checks · 2 content groups

Checklist contents

Review progress

Content and expectations

Compare information and presentation in context of use.

Only make well-founded commitmentsState the scope, duration and source of testing for certification or audit.Distinguish between organization certification and individual product coverage. Place the certification scope next to the name or logo so readers don't understand that every feature is covered.Example The certification name comes with the scope of application and the most recent audit date.Explains data protection in an easy-to-understand mannerState how to protect transmission and storage in a practical way, avoiding unexplained jargon.Distinguish between data protection during transmission and storage with an explanation that is clear enough for non-experts.State where the data is processedIndicate storage and handling areas and area selection if applicable.Internal access permissions explainedIndicate who can access, the conditions and appropriate controls.

Navigation and experience

Try the operation, change the status and continue working.

Report security issuesSet dedicated channels and information to send without making sensitive data public.Try finding a channel to report the problem and check that the reporter knows what to send, instead of posting sensitive details on a public page.Keep incident information clearly publishedShow time, scope and processing results if announced.Describe how to receive test informationRecord the timing of the review and the procedure for asking for additional documentation if provided.State the time of assessment and the scope of sharing; Additional documentation needs a clear question line.

Progress is saved automatically in this browser.

GUIDANCE

How to review

Only make well-founded commitments

Distinguish between organization certification and individual product coverage.

EXAMPLES

Usage examples

Only make well-founded commitments

The certification name comes with the scope of application and the most recent audit date.

Security Website

Content and expectations

Navigation and experience

How to review

Only make well-founded commitments

Usage examples

Only make well-founded commitments

Find a checklist

No checklists found