Difference between revisions of "Features/Compliance"

From TempusServa wiki
Jump to navigation Jump to search
Line 11: Line 11:
* Password reset procedures
* Password reset procedures
* Logging (see below)
* Logging (see below)
* Multifactor authentication


Read more about it in [[Security_setup]]
Read more about it in [[Security_setup]]

Revision as of 13:33, 9 November 2024

Usage

TS NoCode platform is designed to make sure that systems built on can be compliant without any work that needs to be done

  • Security (ISO27k and ISAE)
  • EU law (GDPR etc)
  • Financial regulation

OWASP security

Depending on setup of the server OWASP level 1 or level 2 can be reached. This includes almost all security requirements such as

  • Mitigation of common threats (SQL injection, CSRF etc.)
  • Request throttling
  • Password reset procedures
  • Logging (see below)
  • Multifactor authentication

Read more about it in Security_setup

GDPR support

Data can be marked up and coupled to autimatic deletion or anonoumization,

WCAG (disability)

The UI supports the guidelines required for screenreaders to work.

Traceability

Applications can have the following logging

  • Acccess log
  • Action log (events and actions)
  • Revsion log (copy of all changes)

Additionally the user management can provide

  • Login history
  • History of former group membership

Finally all changes to an application are logged centrally