OWA Digital was appointed in 2018 to host and manage the existing WordPress website run by the Nationwide Group Staff Union (NGSU).
Security is particularly important as the NGSU website is used by Nationwide Building Society employees.
Our initial task was to undertake an application security test using Open Web Application Security Project (OWASP) standards and carry out a comprehensive code review.
What we did
We began the project with a site migration over to our UK-based secure data centre before carrying out a full security audit and website code review. This was to ensure the platform and website were stable, secure and suitable to develop on in the future.
Following completion of the security testing and code review, we met with NGSU and presented a detailed report of our findings. Based on these, we made a number of recommendations for improvements to the website, including security hardening, which we have since implemented.
We also support the NGSU website using our helpdesk platform to review and fix any technical issues raised by NGSU administrators.