Secuirty audit

Hello
Am in the final stages of setting up my project which is going to collect
sensitive HIV data hence its paramount that it's secure.
I have set up a local server and going to uses ssl in tomcat
am also going to encrypt my forms before submission
my question is has ODK aggregate ever gone any basic security audit(I
want to know what to document in my SOP's). as this is a requirement by my
founders.
Thanx

Secondly if I have purchased an ssl certificate do I still need to encrypt
my forms

··· On 26 June 2015 at 08:44, Ayoub Kakande wrote:

Hello
Am in the final stages of setting up my project which is going to collect
sensitive HIV data hence its paramount that it's secure.
I have set up a local server and going to uses ssl in tomcat
am also going to encrypt my forms before submission
my question is has ODK aggregate ever gone any basic security audit(I
want to know what to document in my SOP's). as this is a requirement by my
founders.
Thanx

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
**In sun set years education is not associated with standard of living and
medical care access; it is the the financial myosin and actin!!!

**** Don't give me fish, teach me how to fish

Kayoub K
0772656158 / 0703516660
PMTCT Data Manager
Mujhu Research Collaboration
Mulago Hosp

Lecturer
Kumi University

See https://opendatakit.org/about/security-and-privacy-statement/

The SSL cert encrypts network traffic between mobile and server.
Encrypted forms encrypt data at rest (e.g. on the SD card of the
mobile or in the HD of your server). Use both.

Yaw

··· -- Need ODK services? http://nafundi.com provides form design, server setup, professional support, and software development for ODK.

On Fri, Jun 26, 2015 at 1:21 AM, Ayoub Kakande akakande@gmail.com wrote:

Secondly if I have purchased an ssl certificate do I still need to encrypt
my forms

On 26 June 2015 at 08:44, Ayoub Kakande akakande@gmail.com wrote:

Hello
Am in the final stages of setting up my project which is going to collect
sensitive HIV data hence its paramount that it's secure.
I have set up a local server and going to uses ssl in tomcat
am also going to encrypt my forms before submission
my question is has ODK aggregate ever gone any basic security audit(I
want to know what to document in my SOP's). as this is a requirement by my
founders.
Thanx

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
**In sun set years education is not associated with standard of living and
medical care access; it is the the financial myosin and actin!!!

**** Don't give me fish, teach me how to fish

Kayoub K
0772656158 / 0703516660
PMTCT Data Manager
Mujhu Research Collaboration
Mulago Hosp

Lecturer
Kumi University

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.