Drupal Security Recommendations
Some wise configurations to make in your Drupal setup include:
Welcome!
Some wise configurations to make in your Drupal setup include:
In order to begin developing a new Drupal site it is important to first follow some provisioning guidelines. Regardless of whether or not your new Drupal site will be developed on SAS Computing hosts, you must first conduct a Security and Privacy Impact Assessment, or SPIA, evaluation of the new site.
Multi-Media Services (MMS) is located in the basement of David Rittenhouse Laboratory at 209 South 33rd Street, between Spruce and Walnut Street. View Penn's campus map.
|
Front desk, Multi-Media Services staff: 215-898-4947 Service requests and general information: mms-help [at] sas.upenn.edu |
The School of Arts and Sciences Information Security and Unix Systems (ISUS) regularly audits Drupal modules to ensure security and stability. Before modules can be installed on our production environments they must be reviewed by information security staff. While this review is not a surefire guarantee of security, it does insure a certain degree of safety in the module code.
Welcome to the University of Pennsylvania. This document will lead you through the process of accessing the University’s computing resources. If you have any questions, please contact the Math Department’s Local Support Provider (LSP).
Once a Drupal site is ready for production it should be moved from the development environment to our production environment. The production server is a multi site Drupal host that is closely monitored and backed up by dedicated staff. This ensures the maximum uptime and support for your Drupal site.
Penn has a Vendor Security Technical Assessment of Risk (V-STAR) questionnaire for vendors as part of our SPIA process. This document is intended to help guide vendor responses about existing or planned security controls protecting hosted data and/or systems. Responses are used to evaluate the vendor's existing security posture and whether it meets Penn’s current recommendations and guidelines.