GovCMS security features
Track: Technical
GovCMS is Australia’s leading government content management platform, hosting hundreds of public sector websites under strict cybersecurity requirements.
While GovCMS provides robust cloud infrastructure, the primary line of application defense relies on the pre-configured security modules shipped within the GovCMS Drupal distribution. I will cover the essential Drupal security modules bundled and configured in GovCMS (including Login Security, Security Kit, and security.txt) to mitigate brute-force attacks, enforce strict HTTP security headers, streamline responsible vulnerability disclosures, and maintain compliance with Australian Government Information Security Manual (ISM) guidelines.
While GovCMS provides robust cloud infrastructure, the primary line of application defense relies on the pre-configured security modules shipped within the GovCMS Drupal distribution. I will cover the essential Drupal security modules bundled and configured in GovCMS (including Login Security, Security Kit, and security.txt) to mitigate brute-force attacks, enforce strict HTTP security headers, streamline responsible vulnerability disclosures, and maintain compliance with Australian Government Information Security Manual (ISM) guidelines.
Speakers
Janna Malikova
Hi, there. I’m Janna, a Brisbane-based security researcher and software engineer at Tomato Elephant Studio, specialising in frontend performance and security. I’m a passionate advocate for Free and Open Source Software (FOSS) and actively contribute to the codebases and community by sharing her expertise at local meetups and conferences worldwide.