initial sections #6059
initial sections #6059
Conversation
djw-m
added
the
deploy
github-actions
bot
temporarily deployed
to
pr-6059-security-guidance-new
advocacy_docs/supported-open-source/postgresql/security_guidance/advanced.mdx
Show resolved
Hide resolved
| @@ -0,0 +1,190 @@ | |||
| --- | |||
| title: "Advanced" | |||
There was a problem hiding this comment.
| title: "Advanced" | |
| title: "PostgreSQL Security 301: Advanced Security Guide" |
The title should be the title so it gets H1 heading (for SEO) - and delete the followin H2 title, and maybe uprate the H3 headings to H2
advocacy_docs/supported-open-source/postgresql/security_guidance/advanced.mdx
Outdated
Show resolved
Hide resolved
| Advanced security in PostgreSQL focuses on hardening systems to meet strict compliance standards such as STIGs (Security Technical Implementation Guides), GDPR, PCI-DSS, HIPAA, and FISMA. | ||
| This guide will cover advanced strategies for securing PostgreSQL in high-stakes environments. | ||
|
|
||
| ### 1. Security Technical Implementation Guides (STIGs) |
There was a problem hiding this comment.
| ### 1. Security Technical Implementation Guides (STIGs) | |
| ## 1. Security Technical Implementation Guides (STIGs) |
| log_statement = 'ddl' | ||
| ``` | ||
|
|
||
| ### 2. Compliance Requirements |
There was a problem hiding this comment.
| ### 2. Compliance Requirements | |
| ## 2. Compliance Requirements |
| ``` | ||
|
|
||
| ### 2. Compliance Requirements | ||
| #### 2.1 GDPR (General Data Protection Regulation) |
There was a problem hiding this comment.
| #### 2.1 GDPR (General Data Protection Regulation) | |
| ### 2.1 GDPR (General Data Protection Regulation) |
|
|
||
| Data Breach Notifications: In the event of a data breach, GDPR mandates prompt notification. PostgreSQL logging, auditing, and alerting should help detect breaches immediately. | ||
|
|
||
| #### 2.2 PCI-DSS (Payment Card Industry Data Security Standard) |
There was a problem hiding this comment.
| #### 2.2 PCI-DSS (Payment Card Industry Data Security Standard) | |
| ### 2.2 PCI-DSS (Payment Card Industry Data Security Standard) |
|
|
||
| Logging and Monitoring: PCI-DSS requires detailed logging of all access to cardholder data. Use pgaudit to track reads, writes, and role changes to sensitive data. | ||
|
|
||
| #### 2.3 HIPAA (Health Insurance Portability and Accountability Act) |
There was a problem hiding this comment.
| #### 2.3 HIPAA (Health Insurance Portability and Accountability Act) | |
| ### 2.3 HIPAA (Health Insurance Portability and Accountability Act) |
Leaving the rest of the heading changes to be done (and repeat this process on the rest of the security pages).
There was a problem hiding this comment.
This file needs a good work over on formatting (Headings need to be headings etc etc, the index list then can link to the anchors) and I'd suggest that we credit the author and original blog posting in part to explain why the tone of the content is friendlier than usual.
Oh and the bold text used to mark out paras may be best replaced with the !!! tip admonition.
github-actions
bot
temporarily deployed
to
pr-6059-security-guidance-new
github-actions
bot
temporarily deployed
to
pr-6059-security-guidance-new
github-actions
bot
temporarily deployed
to
pr-6059-security-guidance-new
github-actions
bot
temporarily deployed
to
pr-6059-security-guidance-new
github-actions
bot
temporarily deployed
to
pr-6059-security-guidance-new
|
Would this be better merged into the securityhub PR that's ongoing? |
|
Performed several levels of edits including using the correct levels of edits (per DJ's comment) and removing numbering from heads. Also changed the formatting of bullet items to use periods instead of colons (in favor of moving the colon inside the bold or using our typical em-dash format) since most of those bits were sentences. Made those bits consistent--either noun phrases or verb phrases within each list. Also fixed capitalization of heads to sentence style. Also made vertical spacing consistent and to adhere to style guide (a return after heads) since this is a first revision. Might as well be neat about it the first time out. |
What Changed?