The need for organizations to understand security has never been higher, unfortunately bad assumptions have lead to many sites being left very vulnerable to attack.

OpenConcept developed this best practices guide to provide a starting point to look at when thinking about the security of your website. Much of the information required to secure Drupal is common across most web servers, so even if you are not currently using the Drupal CMS, this document may be useful. There is of course a technical element, but many of the principals are things which need to be understood clearly by everyone.

This document now available through an Attribution-ShareAlike Creative Commons License. There will inevitably be changes and modifications which will need to be made, so please contribute back suggestions.

Download the eBook now from Amazon.

Security needs to be regularly re-evaluated. This document does not include coding best practices, but there are many references included in this document for those looking to learn more.

This guide has lots of practical tips for experienced web developers and systems administrators, but also contains information for managers. We've tried to include useful examples of how to implement these best practices. There are lots of links to other resources for people who want to learn more.

In the latest release we've expanded information about Drupal 8, included information about crackers, and highlighted security regulations that you may need to comply with. We've expanded the Drupal section to explain in more detail how to evaluate Drupal modules and themes for security.

You don't need to be a security expert to get value from this document as everyone benefits from having a better understanding of web security.

Please fill in the following form and let us know if you would like to receive updates, contribute changes or simply download the ePub or PDF.

Like this post? Share it with your network!

Image via the Noun Project and Steffen Nørgaard Andersen under a Creative Commons License.