Shickyrys
Pabyr bane shickyrys
Kys ta shin shickyraghey nyn goryssyn hene, nyn ghlare-obbree lhiassaghey as cur ayns ynnyd nyn gliantyn.
Cur Chuige
Ta RODMENA ny cholught software 'sy Reeriaght Unnaneysit ta er lheh ayns coryssyn beayn, surranseagh. Ta shin cur y chied cheim cheddin er nyn shickyrys hene: cryphtey tra ta shin goll er trooid son dy chooilley hirveish, reamys beg-chied da coryssyn, bun-troggal hene-reirit er nyn greesaghey, as cliaghtey lhiasaghey jeant dy chummal failleil as dy aachooishaghey voue. Cha nel monney fysseree persoonagh ain, jeant dy lhiettal gys co-reggyrt dellal, as cha nel ynnyd-eggey shoh jannoo ymmyd jeh analitys, lorgaghyn ny cookiaghyn soilsheanagh.
Myr colught beg jeshaghteyrys ta çhymmylt derrey yn aght ry-hoiys ain, as ta ny sleih ta stiurey ny coryssyn ain ny sleih ta er nyn troggal, myr shen ta'n towse-oardrail jeeragh. Raad ta stiurey heese er lheh da coardail, ta'n cummey kiart echey coardit ayns cooishyn y chonaant.
Identity as stiurey roshtyn
- Feeraghey yl-horçh
- Ta coontyssyn ogheragh, goaill stiagh cummey coad, bun-troggal as post-l, er ny gheddyn liorish MFA as credjallyn lajer as unnyssagh ayns reireyder focklyn-folliagh.
- Yn chooid smoo beg dy chairys
- Ta roshtyn gientynsagh limitit dauesyn ta feme er as t'eh trooid SSH key, gyn loggal stiagh lesh password. Cha nel roshtyn root ymmydit dagh laa.
- Coryssyn chliant (RBAC)
- Ta'n software ain cur pooar da stiurey roshtyn rere paart as scarrey yl-hirreyder, lesh PostgreSQL shickyrys rere straih ayns ny troggalyn ta cummal fysseree hirreyder.
- SSO
- Son cur-lhieghyn da kionneyderyn, ta co-obbraghey rish y churreyder enney eu currit ayns raad da dagh co-obbraghey.
Cryssaghey
- Ayns shiaulley
- Ta dy chooilley hirveish theayagh jannoo ymmyd jeh TLS, as ta traaghyn HTTP currit er ash gys HTTPS.
- Ec fea
- Ta'n floag dy choryssyn bunneydagh jannoo ymmyd jeh diskyn cryt, as ta cooyrtyn bunneydagh cryt roish my nod ad nyn host y aagail. Cha nel diskyn cryt ec paart dy hostyn baghee foast. Son cur ayns ynnyd cliant ta shin coyral as cur er bun stoyral cryt as PostgreSQL cooyrtyn cryt myr stundayrt.
Lhiasaghey shickyr
- Reirey lhiegganyn
- Ta dy chooilley choad er ny reayll ayns Git lesh shennaghys ry-veihll. Cha nel folliaghtyn er nyn goipaghey dy bragh ayns tashtlannyn.
- Crogheyderyn
- Ta shin freayll crogheydyssyn ec y chooid smoo beg (cha nel feme ec Highway agh er PostgreSQL, gyn Kafka, Redis ny queuyn mooie) as ta shin cur caghlaa orroo dy tappee tra ta coyrle shickyr currit magh.
- Prowal
- Ta caghlaaghyn currit fo prow er nyn skeayley, as ta sheshaght prowail hene-obbragh jannoo shirrey er y ynnyd-eggey shoh er dagh caghlaa.
Loggal, cooyrtyn as aahassaghey
- Loggal
- Ta coipyn stiagh as loghyn marranys er ny freayll son arrey shickyr as er ny chasherickey dy cadjin. Cha nel ny loghyn cur sheese agh meadaneys obbragh, gyn cooid fys pearsanta.
- Cooyrtyn
- Ta cooid-choryssyn co-obbraghey nyn goipyn cooilleenit, follit as prowit, kiaddit da ny kianglaghyn aachuirrmee ta cordit. Er yn oyr dy vel Highway gienntagh PostgreSQL, ta greieyn coipaghey PostgreSQL ry-ymmyd dy cadjin.
- Aahassaghey
- Ta Highway jannoo ymmyd jeh cooilleeney beayn. T'eh cur stiagh fys y chooid-chorys as stayd y waddell-obbragh 'sy cho-chiangley cheddin, myr shen cha nel pooar ec tuittim dy aagail stayd neu-chooilleenit.
Reirey anlheiltys
Ta coryssyn obbree as crogheyderyn currit dy tappee, rere ord y trommeyd. Ta shin soilshaghey polasee foilsaghey freggyrtagh as security.txt so-lhaih ec maynagh.
Prowal treanagh: Plandit Bee coontey jeh'n cheim as ny reddyn va feddynit soilshit er y Trust Centre lurg y chied ventyr.
Freggyrt as fogrey magh taghyrt
Ta taghyrtyn ouryssagh currit fo triage chelleeragh ec ny h-inneenyn ta stiurey yn chorys ta bentyn roo. Raad ta taghyrt bentyn rish kionneyder, ta shin cur fys da'n chionneyder shen gyn moille neu-ymmyrchagh, cur sheese cre ta fys ain, cre ta shin jannoo as cre ta shin coyrt coyrle er. Ta brishey fys pearsanta currit er bun cordail rish UK GDPR, goaill stiagh fogrey magh da'n ICO cheu-sthie jeh 72 oor raad ta feme er. Kiangley shickyr: security@rodmena.co.uk.
Feanishyn
Ta RODMENA LIMITED feeraghey fo scaym Cyber Essentials ta cummit ec Reiltys y Reeriaght Unnaneysit son y cheshaght ooilley: teishtys 00d24b59-7739-4d97-bb66-341ac50ef018, breeoil derrey 2027 Mean-fouyir 30. Ta stayd roie Cyber Essentials Plus, claaraghey ICO as ISO/IEC 27001 er ny reayll cooie er y Trust Centre.