Last updated
Is there something wrong with this page?
We are updating our documentation library to be ready for Sector 10! Find out more in our Sector 10 roadmap or head straight to our collection of Sector 10 - Changes and Updates.
The Sector Security module enables a set of recommended security modules and provides additional security features for Sector sites.
The Sector Security module aims to get you started by providing basic tools around user authentication. Secure hosting solutions and regular maintenance are important factors to cover in your security policy that can't be covered here. Acquia provides a comprehensive Guide to Drupal Security that should be reviewed regularly and adapted as necessary.
Assessing and adapting your security policy
In New Zealand the New Zealand Information Security Manual defines guidelines and tools to define your site's security needs based on your threat level, including settings for password policies and automated logout. Need more help? Cert.govt.nz offers helpful advice.
Sector Security module
Included modules and configuration
| Modules | Starter Config | Site owner's responsibilities |
|---|---|---|
| Password policy |
Applies to all roles. |
Enable and adapt policy for your needs. |
| Automated logout |
User-specific logout thresholds and role-based settings are disabled. |
Enable and adapt policy for your needs. |
Where to get started
Sector security is shipped with the Sector Starter Kit but not enabled.
- Go to /admin/modules
- Enable Sector Security
Enabling Sector security will enable 6 modules: Sector Security, Automated Logout, Password Policy, Password Character Types Policy, Password Policy History, Password Character Length Policy. Once the module is enabled, you can adjust our configuration to your requirements.
Configuration
To configure your own password policy, go to:
<your-domain>/admin/config/security/password-policy
Additional options for your password policy are available and can be enabled. See the Password Policy module documentation for more!
To configure your own automated log-out policy, go to:
<your-domain>/admin/config/people/autologout