New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create a security.txt for core data.gov properties (data.gov, catalog.data.gov, resources.data.gov) #4953

Open

1 task

tdlowden opened this issue Oct 29, 2024 · 0 comments

Labels

compliance

Member

tdlowden commented Oct 29, 2024

Please keep any sensitive details in Google Drive.

Date of report: 10/29/24
Severity: Low
Due date: 1/31/25

Analysis has been performed and an issue has been linked to address other occurrences for this class of vulnerability* (link)

Brief description

security.txt files are a recommendation of CISA as one of the priority Cybersecurity Performance Goals: https://www.cisa.gov/news-events/news/securitytxt-simple-file-big-value

We are also dinged on ScanGov for not having them, affecting our score: https://scangov.org/profile/?domain=data.gov#security

Adding a security.txt to our core sites will help us align with best practices and score higher on security factors

tdlowden added the compliance label

tdlowden added this to data.gov team board

Bagesary moved this to 📥 Queue in data.gov team board

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment