> Open an email group and name it seurity@mycompany.com and add a page on your website to report security incidents to this email
You know a company takes security seriously when they have a typo in the word "security".
You know a company takes security seriously when they have a typo in the word "security".
None the less it is a useful document for those not versed in the basics of opsec and there's likely more value in insightful comments on the content...
1. (especially of information, measurements, or predictions) correct in all details; exact. "accurate information about the illness is essential" synonyms: correct, precise, exact, right, errorless, error-free,
A typo is the antithesis of this.
However, as I mentioned in my previous comment the content is of value and to find fault in the guise of typos is absurd.
Might want to throw in there a suggestion to generate a security@example.com GPG key and instructions to use it if the submitter feels it warrants it. Also, the usual note of not losing the private half of the GPG key so you don't look like an ass when someone emails you an encrypted security incident that you cannot decrypt!