diff --git a/source/security.rst b/source/security.rst index 55214ba1..902138bf 100644 --- a/source/security.rst +++ b/source/security.rst @@ -7,6 +7,9 @@ Introduction ------------ This document details the security framework for Open OnDemand, providing essential information that administrators need to know for secure deployment and operation. +.. note:: + If you're here to report a vulerability, you may refer to :ref:`vulnerability-management`. + Considerations -------------- This section outlines key security advantages and areas for vigilance within the Open OnDemand environment. @@ -34,13 +37,6 @@ that some centers may want to change or disable altogether. One option is to :ref:`set-file-allowlist` to limit what directories users may navigate to. -Additional Information ----------------------- - -- **Vulnerability Management**: Active management of security weaknesses includes regular updates and patches. Detailed processes and current security advisories are available at :ref:`vulnerability-management`. - -- **Security Audits**: The platform undergoes periodic security audits by Trusted CI, the NSF Cybersecurity Center of Excellence. Summaries of these audits are available, with the latest report accessible `here `_. - Conclusion ---------- Maintaining a secure and robust operational environment is critical for the success of Open OnDemand. Administrators are encouraged to implement the security practices recommended in this guide and to regularly review security settings and updates.