Guidance
Digital Service Security
Designing, building and operating digital services to deter cyber attack.
Pages
Page 2 of 7
5 Aspects of Digital Service Security
Designing, building and operating digital services to deter cyber attack.
- 1. Understanding your service Understand your service and the data you need to operate it. Take an end to end view of your service when protecting it - make sure you include the users, their devices and your suppliers.
- 2. Managing cyber security risk in a digital service Manage your security risk by considering security as a factor in every design and implementation choice. Understand the risks you are prepared to take and those which you aren't.
- 3. Designing a secure digital service Design your digital services to be difficult to compromise and disrupt. Limit the impact of a compromise and make it easy to detect a successful attack.
- 4. Building a secure digital service Build out your service using best practice configuration guidance. Protect the integrity of your source code and other artefacts from day one right through to deployment. Test that you've secured it properly.
- 5. Operating a secure digital service
Operate your service well by continually improving and testing it, patching or mitigating security issues in components and by monitoring for attacks, or unusual behaviour.