Note that since Drupal 8 is still under active development, some of the details here may change prior to its release. Drupal 8 is now feature-frozen, so most information should remain relevant. Where applicable, Drupal 7 contributed equivalents of Drupal 8 features will be noted.

Protecting your Drupal site requires multiple levels of security. By building layers of application-, network-, and endpoint-level protections—or what Acquia calls “defense in depth”— organizations can buy time to fend off would-be attackers, improving resiliency. However, defense isn’t just about on-premise security. Keeping your Drupal site safe and secure is a shared responsibility across your organization and trusted vendors.

In this ebook, we’ll go over ways you can best secure your Drupal site and best practices for how your organization handles security incidents.

In the past decade, the web has changed completely. What was once merely a content distribution channel is now all about social content—rich, interactive blends of media types shared by diverse groups of individuals and delivered to a variety of devices.

This sweeping change brought a new set of challenges. Many organizations’ websites now have blogging functionality, internal collaboration sites, customer support via technical forums, commerce functionality, and support for various devices, such as iPad and Android.