Could your APPG website become a security risk?

pch

An APPG website does not need frequent new content to remain useful. However, the technology behind it still needs maintaining.

Many standalone APPG websites use platforms such as WordPress, together with themes and third-party plugins. These components receive regular security updates as vulnerabilities are discovered. If nobody is actively maintaining the website, those updates can be missed — sometimes for months or years.

That does not mean an older website is automatically insecure. But the longer software remains unpatched, the greater the possibility that a known vulnerability could be exploited. Automated attacks routinely scan the web for outdated software, regardless of how prominent or otherwise the organisation behind the website may be.

For an APPG, the consequences could range from nuisance spam and website downtime to pages being altered, malicious content being inserted, or information submitted through website forms being exposed. Recovering a compromised website can also require specialist technical assistance.

This is one reason some secretariats and MPs may wish to consider moving their APPG website to appg.inparliament.uk.

Rather than each APPG being responsible for maintaining its own underlying website software, the technical platform is centrally maintained and updated. Secretariats can therefore concentrate on their group’s content, publications, meetings and membership rather than monitoring software versions, plugins and security patches.

For groups without dedicated technical support, moving to a maintained platform can remove a small but unnecessary administrative and security burden.

Email us on support@inparliament.uk for more information or to meet in Parliament.