Slides from Jamie Schmid's presentation at WordCamp Raleigh, 2018. Original talk written by Adam Warner, SiteLock Community Manager.

1. TO USERS AND CLIENTS
MAKING SECURITY MAKE SENSE

2. JAMIE SCHMID
• COMMUNITY EVANGELIST @SITELOCK
• FREELANCE DESIGNER AND DEVELOPER
• PASSIONATE ABOUT WORDPRESS AND
DRUPAL
• CONTENT ENTHUSIAST
• PROUD CAT MOM IN PORTLAND, OR
@JAMIESCHMID

3. WHAT WE’LL COVER TODAY
• Securing your own site first
• Securing your client sites
• Benefits for your business
and your those of your clients
• Communicating security
benefits efficiently
• Including security in the
project scope
• Security best practices
• Security in your maintenance
program
• Maintenance and reporting
options

4. SECURING YOUR SITE
THE BENEFITS OF…

5. OWN YOUR
REPUTATION

6. FAMILIARITY WITH
SECURITY BEST PRACTICES

7. PROTECTING YOUR
BUSINESS

8. SECURING YOUR CLIENT SITES
THE BENEFITS OF…

9. IN YOUR BEST INTEREST
ESPECIALLY WHEN INHERITING WEBSITES
DEVELOPED BY SOMEONE ELSE

10. PEACE OF MIND

11. EDUCATING CLIENTS ABOUT SECURITY
THE BUSINESS BENEFITS OF…

12. SECURITY AWARENESS
MAKING THE INTERNET SAFER

13. WHO’S RESPONSIBLE FOR SECURITY?
YOU? THE CLIENT? THE WEB HOST?

14. SETTING YOUR BUSINESS APART
INCREASING YOUR VALUE

15. ADDITIONAL REVENUE
HIGHER PRICES - RESIDUAL INCOME

16. COMMUNICATING THE NEED FOR
SECURITY EFFECTIVELY
THE BENEFITS OF…

17. COMMUNICATE
THREE THINGS

18. WHY?
DEFACEMENT
FINANCIAL GAIN

19. WHO AND HOW?
MOSTLY BOTS
ACCESS POINT VULNERAILITIES

20. WHEN?
LITERALLY ALL THE TIME

22. IMPLEMENTING 5 SIMPLE WEBSITE
SECURITY BEST PRACTICES
THE BENEFITS OF…

23. 1. BACKUPS
HOST BACKUPS ON A DIFFERENT SERVER
SCHEDULE BACKUPS REGULARLY
(DAILY/WEEKLY/MONTHLY)

24. THROUGH YOUR HOST
(BE SURE IT IS A FULLY RESTORABLE BACKUP!)
VAULT PRESS
BACKUP BUDDY
UPDRAFT PLUS
AUTOMATE WITH A BACKUP SCRIPT (ADVANCED)
MANUAL BACKUPS (UGH)

25. 2. UPDATES
THE BIGGEST AND EASIEST
VULNERABILITY TO AVOID!
@WPDISTRICT BLOG SECURITY SERIES

26. 3. STRONG,
UNIQUE PASSWORDS
HTTPS://HAVEIBEENPWNED.COM/PASSWORDS
USE A PASSWORD MANAGER!

27. PASSWORD MANAGEMENT
LASTPASS 1PASSWORD

28. 4. FIREWALLS & CDNS
NETWORK FIREWALLS - HOSTS
WEB APPLICATION FIREWALLS - SITE OWNER

29. 5. CONTINUOUS
MONITORING
AUTOMATED WEBSITE SCANNER

30. INCLUDING SECURITY IN THE PROJECT
SCOPE
THE BENEFITS OF…

31. PROFESSIONAL IMAGE
& TRUST

32. INFORMS CLIENT FROM
THE BEGINNING

33. INCLUDING SECURITY AS A SERVICE
THE BENEFITS OF…

34. MAINTENANCE PLANS
2-3 LEVELS
LIST THEM ON YOUR WEBSITE
MONTHLY SUBSCRIPTION

35. RECURRING BILLING
PAYPAL
FRESH BOOKS
STRIPE

36. ADD-ON SERVICES
ONE-TIME CLEANUP
INITIAL SETUP
EVALUATION/REVIEW
CONSULTATION

37. USE A SCHEDULE!
ASANA
GOOGLE CALENDAR
WORDPRESS PLUGIN

38. AUTOMATING MAINTENANCE AND
REPORTING
THE BENEFITS OF…

39. MAINTENANCE &
REPORTING

40. MANAGEWP

41. INFINITEWP

42. SITELOCK

43. IN SUMMARY…

44. SECURITY = GOOD
NO SECURITY = BAD

45. BONUS SLIDE!

46. GDPR :(
1. BE INFORMED: ARE YOU A CONTROLLER OR A PROCESSOR?
2. AUDIT YOUR DATA. BE PREPARED TO SHARE IT.
3. TRANSPARENCY: DETAIL THE AUDIT ON YOUR PRIVACY
POLICY PAGE, INCLUDE CONSENT OPTIONS AT COLLECTION
4. FIND AND REMOVE NON COMPLIANT PROCESSORS
5. DESIGNATE A DPO (DATA PROTECTION OFFICER)

47. THANK YOU!
@JAMIESCHMID, SITELOCK
I BLOG TOO! @WPDISTRICT

48. QUESTIONS?