Community Site Security?

[AppDefects]

@david-shearer  @amandavanceISC2 this Community site needs some love and attention to when it comes to security. In particular, it is missing several "security headers". The site gets a failing grade of "D" [report here]. In comparison the isc2.org site gets a grade of A [report here].

[Shannon]

---

@cdc wrote:

When was the last ISC2 security risk assessment performed and what were the results?

---

I have a feeling they concluded that performing a risk assessment was too much of a risk...  

[cdc]

Would you share a list of what  you consider "academic" and therefore not worth time to implement?

[cdc]

@AppDefects, great catch!  The lack of content security policy is the main reason for the C grade.  Troy Hunt, Microsoft Regional Director and MVP, has several articles on his website about its purpose and how to configure.