Building a Culture of
Security
Staying Safe on the Internet
Keep Your Websites Online
In addition to protecting your ability to access the internet safely, it is also important to do what you can to ensure others can access your parliament’s websites or web properties. For social media pages, this means protecting those accounts with strong, unique passwords and two-factor authentication. For your website, this means protecting it against hacking and denial of service attacks. Distributed Denial of Service (DDoS) attacks are where a large group of computers simultaneously drown your server in malicious traffic. A few options for free DDoS protection - which makes it much harder for an adversary to take your website down - include include Cloudflare, Amazon’s AWS Shield, or eQualitie’s Deflect service.
Hosting your Parliament's Website Securely
Websites are hosted on computers - and those are vulnerable to hacking just like your own devices. If possible, your parliament should take advantage of existing hosting services like WordPress, Wix, or others that manage all the site security for you. If your website needs are more complex and/or you need to host your website yourself, then be sure to focus on keeping your operating system and web hosting software up to date, just like you would for your personal computer. Consider using well-established cloud hosting providers such as Amazon Web Services (AWS), Microsoft Azure, or Greenhost’s eclips.is, which provide enhanced security options for hosted websites. Regardless of what tools you use to host your website, ensure that any accounts used to access content editing and configuration settings are protected with strong passwords and two-factor authentication.
If your parliament has the technical savvy to host its own website, you should consider choosing a so-called “static-site” or flat website. As opposed to dynamic websites, these types of sites reduce the attack surface for hackers and will make your website more attack resistant.