[development] Certify Drupal for use in Government (US) Projects

[Jon Saints]

The names of Citizens are collected on the website along with some personal
contact information.  We were told that our application required the Medium
level security certification.

For collecting more sensitive information, certification becomes nearly
impossible.

Thanks
Jon

On Tue, Sep 30, 2008 at 9:35 AM, Gerhard Killesreiter <
gerhard at killesreiter.de> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Jon Saints schrieb:
>
> > On a recent project for the US government, half way through the
> > development process, our work was stopped by a government security
> > review which said that Drupal (and open source software in general)
> > is not suitable for use in government projects that house personal
> > information due to security concerns.
>
> Just out of interest: What kind of information are we talking about?
> Tax numbers, bank accounts?
>
> [...]
>
> > I notice other governments around the world are using Drupal with great
> > success and savings to citizens:
> > http://buytaert.net/new-zealand-government-using-drupal
>
> Seems like a showcase site only.
>
> Cheers,
>        Gerhard
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFI4kdWfg6TFvELooQRArp1AKCdXFYZDMztJ7wrhhiOJOFG4q3/lACfbsXK
> BX1vLaioeWG348yH/V/ufKs=
> =yFhK
> -----END PGP SIGNATURE-----
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/development/attachments/20080930/4bebd234/attachment.htm