Government agency and compliance

• 

  longliyann · Member · Apr 8, 2019 at 2:26 am

  • Copy link
  • Add topic to favorites

  Hi,

  I am working for a government educational institution and have to comply with stringent ICT guidelines.

  I’m trying to create a campus-wide news portal for my students as part of their learning and am keen to use WordPress.com. However, due to the guidelines, I would like to find out the following:

  – Has WordPress.com been independently audited or certified by competent third parties to be in compliance with industry Cloud security standards (eg. Cloud Security Alliance (CSA) Star Certification)?

  – Will WordPress.com be able to help us submit a report to ensure that it is compliant with the ICT guidelines stipulated, if requested? For example, one criteria that the ICT security team looks at is that security configuration are hardened and based on standards such as NIST 800-53, Centre for Internet Security (CIS).

  I am not a technical person by nature (I teach) so I am trying to see how I can make this work. Appreciate any help and many thanks.

• 

  justjennifer · Member · Apr 8, 2019 at 5:27 am

  • Copy link

  Hi there, I’ve flagged this thread for Staff input on your questions. Thanks for your patience while they get back to you.

• 

  staff-zinnia · Staff · Apr 9, 2019 at 1:25 pm

  • Copy link

  Thanks for the tag, justjennifer. Looking in to the request and will report back.

• 

  staff-zinnia · Staff · Apr 12, 2019 at 3:06 pm

  • Copy link

  Howdy longliyann –

  We aren’t able to fulfill this request.

• 

  justjennifer · Member · Apr 16, 2019 at 5:33 am

  • Copy link

  Thanks for the follow up staff-zinnia

• 

  longliyann · Member · Apr 17, 2019 at 12:45 am

  • Copy link

  Thank you for your clarification.