Site testing: Security

[DavidIIED]

Basic site security configuration. Our annual site penetration testing will be undertaken by external consultants later in the year.

• [ ] Test unauthorized access to secure pages is not be permitted
• [ ] Restricted files are not downloadable without appropriate access
• [ ] Strong user password policy in place
• [x] Appropriate SSL certificate installed

Method: Manual testing

[DavidIIED]

For discussion at next progress meeting @cbrody , @ncktrnr , @mattjobob