Answers.Body: <p>There was a Mozilla audit last year - see <a href="https://civicrm.org/blog/josh/quarterly-report-q1-2020" rel="nofollow noreferrer">https://civicrm.org/blog/josh/quarterly-report-q1-2020</a></p>
  <p>For general info see <a href="https://civicrm.org/security" rel="nofollow noreferrer">https://civicrm.org/security</a> and <a href="https://docs.civicrm.org/sysadmin/en/latest/setup/security/" rel="nofollow noreferrer">https://docs.civicrm.org/sysadmin/en/latest/setup/security/</a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2021-07-09T15:54:41.630Z
Answers.LastActivityDate: 2021-07-09T15:54:41.630Z
Answers.UserDisplayName: Demerit
Body: <p>As part of our annual information governance review we have to answer a question on whether all of the suppliers of our systems have cyber certifications.  CiviCRM as open source software is a bit tricky to fit into this question.</p>
  <p>Has the core code for Civi is cyber security tested in anyway, whether this is the methodology for releasing new code changes or whether the core code has ever been pen tested?</p>
  
Tags: <security><testing>
Title: Cyber security penetration testing
ThreadText: # Cyber security penetration testing
  
  (Asked by: username_0 on 2021-07-09)
  
  As part of our annual information governance review we have to answer a question on whether all of the suppliers of our systems have cyber certifications. CiviCRM as open source software is a bit tricky to fit into this question.
  
  Has the core code for Civi is cyber security tested in anyway, whether this is the methodology for releasing new code changes or whether the core code has ever been pen tested?
  
  **Tags:** security, testing
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2021-07-09. Score: 1
  
  There was a Mozilla audit last year - see <https://civicrm.org/blog/josh/quarterly-report-q1-2020>
  
  For general info see <https://civicrm.org/security> and <https://docs.civicrm.org/sysadmin/en/latest/setup/security/>
  
  
  ---
  
  